Dropped privileges from root to nobody, added capabilities with capsh

backend/docker-entrypoint.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+chown nobody:nobody -R /execute/
+
+capsh --caps="cap_net_admin+eip cap_setpcap,cap_setuid,cap_setgid+ep" \
+    --keep=1 --user=nobody --addamb=cap_net_admin -- \
+    -c "python3 /execute/app.py DOCKER"
+
+