Harden a Pod Security Context

Bring a privileged workload up to the Restricted security standard.

A beginner Linux challenge worth 3 points. Solve it hands-on in a real Linux environment in your browser - no local setup, no fake shells.

The Challenge

Harden payments-worker: run as non-root UID 1000, disable privilege escalation, use a read-only root filesystem, drop ALL capabilities, and select RuntimeDefault seccomp. Apply and run check.