path: root/python/subuser/README

Subuser turns a docker container into a normal program. This program,
however, runs with restricted privileges. It can only access the
directory from which it was called, not the user's entire home
directory. Each subuser is assigned a specific set of permissions.