Openshift Security Queries

Issue

Can we avoid local groups creation in openshift.

/etc/passwd
> dockerroot:x:***:773:Docker User:/var/lib/docker:/sbin/nologin
> etcd:x:772:***:etcd user:/var/lib/etcd:/sbin/nologin
> cockpit-ws:x:***:771:User for cockpit-ws:/:/sbin/nologin

/etc/group
> dockerroot:x:773:
> etcd:x:772:
> cockpit-ws:x:771:

• Can we remove this setuid privilege as a root and what will be the impact after this modification.)

> -rwsr-x---. 1 root cockpit-ws 40376 May 17 17:27 /usr/libexec/cockpit-session

• Can IP forwarding be disabled :
  ~~
  /etc/sysctl.conf
  > net.ipv4.ip_forward=1
  ~~~