diff --git a/sock-shop/orders-db.yaml b/sock-shop/orders-db.yaml
index 44b320c..480d0cf 100644
--- a/sock-shop/orders-db.yaml
+++ b/sock-shop/orders-db.yaml
@@ -37,6 +37,7 @@ spec:
             - SETGID
             - SETUID
           readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
         volumeMounts:
         - mountPath: /tmp
           name: tmp-volume
@@ -44,6 +45,7 @@ spec:
       - name: tmp-volume
         emptyDir:
           medium: Memory
+
 ---
 apiVersion: v1 # Service - orders-db
 kind: Service