diff --git a/sock-shop/payment.yaml b/sock-shop/payment.yaml
index bbd4198..08661c2 100644
--- a/sock-shop/payment.yaml
+++ b/sock-shop/payment.yaml
@@ -36,6 +36,7 @@ spec:
             add:
             - NET_BIND_SERVICE
           readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
         livenessProbe:
           httpGet:
             path: /health
@@ -48,6 +49,7 @@ spec:
             port: 80
           initialDelaySeconds: 180
           periodSeconds: 3
+
 ---
 apiVersion: v1 # Service - payment
 kind: Service