Amazon ECS Adds Support for Adding or Dropping Linux Capabilities to Containers

Docker containers run as “unprivileged” by default and thus are unable to execute most system and network administration operations. Docker privileged mode gives containers root access, which may not be optimal or secure for many workloads.

Read full news article on DABCC