C Linking

Docker

www-data us a normal Linux user, created specifically for web servers. It has no sudo, and very limited file access.

RUN addgroup -S nodejs && adduser -S nodejs -G nodejs
USER nodejs

The Node.js process is not root

It cannot

• Install system packages
• Modify system files
• Bind to privileged ports (<1024)
• Change kernal settings