What this snippet does
no-new-privileges prevents setuid binaries from raising the process's privileges.
Expected output
uid=1000(app) gid=1000(app)
Why practise typing this
Typing users & security code builds muscle memory for the symbols and indentation Docker uses most, which prose-based typing tests never cover. DevType measures your words per minute and accuracy on this snippet and tracks the individual characters you mistype, so later lessons can target them.
More Docker practice
- Dropping rootUsers & Security · intermediate
- Writing to a root-owned pathUsers & Security · intermediate
- Creating a service accountUsers & Security · intermediate
- Read-only root filesystemUsers & Security · advanced
- Dropping capabilitiesUsers & Security · advanced
- Privileged containersUsers & Security · advanced