Assertion: container | /r/CapableOf | make unsafe system calls
Facets:
Source sentences:
text: Other runtime options could allow a container to make unsafe system calls, mount sensitive directories in read-write mode, and even compromise the host OS.