Assertion: container | /r/CapableOf | mount sensitive directories
Facets:
value: in read-write mode
type: TEMPORAL
Source sentences:
text: Other runtime options could allow a container to make unsafe system calls, mount sensitive directories in read-write mode, and even compromise the host OS.