docker needs to be able to look at everything in /dev
Allow all processes to send themselves signals