Title. Just curious since apparently cap_drop=all means that the container “can’t do a thing” (?). Root users are (also) included in this (?). That’d be great if someone could enlighten me on this topic.

Thanks in advance.