runAsContext: - userName: root groupName: root gid: 0 uid: 0 description: Handbrake runs as root user. capabilities: - name: CHOWN description: Handbrake is able to change file ownership. - name: DAC_OVERRIDE description: Handbrake is able to bypass file read, write, and execute permission checks. - name: FOWNER description: Handbrake is able to bypass permission checks on operations that normally require the file system UID of the process to match the UID of the file. - name: SETUID description: Handbrake is able to set the setuid attribute on a file. - name: SETGID description: Handbrake is able to set the setgid attribute on a file. - name: NET_BIND_SERVICE description: Handbrake is able to bind a socket to internet domain privileged ports (port numbers less than 1024). - name: KILL description: Handbrake is able to kill processes. hostMounts: []