title: Why it is unsafe to run applications as root in Docker container?
body: <p>There are many sources telling it is bad to run apps under root inside Docker container but they always refer to this link: <a href="https://blog.docker.com/2014/06/docker-container-breakout-proof-of-concept-exploit/" rel="nofollow noreferrer">https://blog.docker.com/2014/06/docker-container-breakout-proof-of-concept-exploit/</a> with issue fixed long ago because newer Docker versions whitelist kernel capabilities.</p>
  
  <p>Therefore:</p>
  
  <ul>
  <li>Were there any other Docker exploits that worked under container root user but didn't work under container non-root user?</li>
  <li>Were there any linux kernel exploits that worked under container root user but didn't work under container non-root user?</li>
  </ul>