Docker restricts the permissions of software running in the container. It is hardened by default and you need to manually grant permissions in some rare cases.