diff --git a/sock-shop/session-db.yaml b/sock-shop/session-db.yaml
index d03f9a9..b37cbea 100644
--- a/sock-shop/session-db.yaml
+++ b/sock-shop/session-db.yaml
@@ -37,6 +37,8 @@ spec:
             - SETGID
             - SETUID
           readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
+
 ---
 apiVersion: v1 # Service - session-db
 kind: Service