diff --git a/docker-compose.yml b/docker-compose.yml
index 76fcd047c..6ffe4f7e5 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -17,6 +17,8 @@ version: '3.8'
 services:
   # RustFS main service
   rustfs:
+    security_opt:
+      - "no-new-privileges:true"
     image: rustfs/rustfs:latest
     container_name: rustfs-server
     build: