Root that is not root

• A

  Everything root can do on the host, since user id 0 is checked by the kernel

• B

  Nothing privileged at all, since the real id is unprivileged

• C

  Only file operations, since every other privileged operation is independent of the namespace

• D

  Everything root can do to resources inside the namespace, and nothing privileged outside it