Hardening Docker Containers: Disable SUID Programs
blog.tutum.co