config: Eliminate privileged escalation in containers

Now that all aspects of the Moodle envirnonment are in volumes, there is no longer a need
for containers to run in privileged mode to cope with file permission issues.

Author: joshuacurtiss

compose/default.yml

@@ -2,7 +2,6 @@ name: $mname
 services:
    mariadb:
       image: $MARIADB_IMAGE
-      privileged: true
       restart: unless-stopped
       networks:
          - backend
@@ -17,7 +16,6 @@ services:
          - db:/bitnami/mariadb/data
    moodle:
       image: $MOODLE_IMAGE
-      privileged: true
       restart: unless-stopped
       ports:
         - $MOODLE_PORT:8080

libexec/mdl-restore.sh

@@ -182,7 +182,6 @@ for mname in $mnames; do
          fi
          db_runner="${mname}_worker_db_restore"
          container_tool run -d --rm --name "$db_runner" \
-            --privileged \
             -e MARIADB_ROOT_PASSWORD="${ROOT_PASSWORD:-password}" \
             -e MARIADB_USER="${DB_USERNAME:-moodleuser}" \
             -e MARIADB_PASSWORD="${DB_PASSWORD:-password}" \