> Additionally this CVE relies on the getuid syscall being available, there is no reason to give a container this syscall, you should block it, Huh? Lots of le

> Additionally this CVE relies on the getuid syscall being available, there is no reason to give a container this syscall, you should block it, Huh? Lots of legitimate things will break without working getuid(). > you should block it, ala this guide getuid() doesn't require any capabilities, so it can't be blocked by taking them away.