[YARN-7960] Add no-new-privileges flag to docker run

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.2.0, 3.1.1
• Labels: Docker
• Target Version/s: 3.2.0, 3.1.1
• Assignee: Eric Badger
• Reporter: Eric Badger
• Created: 22/Feb/18 16:02
• Updated: 22/May/18 18:44
• Resolved: 22/May/18 17:49

Description

Minimally, this should be used for unprivileged containers. It's a cheap way to add an extra layer of security to the docker model. For privileged containers, it might be appropriate to omit this flag

https://github.com/moby/moby/pull/20727