diff --git a/dangerzone/container.py b/dangerzone/container.py
index a0e1a5a..c003b2b 100644
--- a/dangerzone/container.py
+++ b/dangerzone/container.py
@@ -75,6 +75,7 @@ def documenttopixels(document_filename, pixel_dir, container_name):
                 "run",
                 "--network",
                 "none",
+                "--security-opt=no-new-privileges:true",
                 "-v",
                 f"{document_filename}:/tmp/input_file",
                 "-v",