Signal9Signal9 — home
online
back to labs

Container Audit: Find the Privileged Service

MediumDevOps10-15 min
The brief

A security audit of the container stack is due. Running a container in privileged mode gives it near-root access to the host — a serious risk. Examine /root/project/docker-compose.yml (the stack differs per session), find the ONE service that is actually running privileged, and record its service name to /root/answers/privileged_svc.txt. A commented-out setting or privileged: false doesn't count.

What you'll do
  • Record the privileged service's name to /root/answers/privileged_svc.txt

Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.