<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="675" viewBox="0 0 1200 675"><rect width="1200" height="675" fill="#fff7ed"/><text x="70" y="82" font-size="34" font-weight="700" fill="#4a1d1d">特权容器风险面</text><text x="70" y="123" font-size="20" fill="#7c4a35">设备、内核能力、宿主机挂载和集群权限叠加</text><rect x="470" y="245" width="260" height="150" rx="24" fill="#fee2e2" stroke="#dc2626" stroke-width="4"/><text x="520" y="330" font-size="30" fill="#4a1d1d">privileged</text><rect x="80" y="190" width="240" height="90" rx="18" fill="#ffedd5" stroke="#f97316" stroke-width="3"/><rect x="80" y="400" width="240" height="90" rx="18" fill="#ffedd5" stroke="#f97316" stroke-width="3"/><rect x="880" y="190" width="240" height="90" rx="18" fill="#ffedd5" stroke="#f97316" stroke-width="3"/><rect x="880" y="400" width="240" height="90" rx="18" fill="#ffedd5" stroke="#f97316" stroke-width="3"/><text x="145" y="245" font-size="22" fill="#4a1d1d">设备访问</text><text x="135" y="455" font-size="22" fill="#4a1d1d">敏感挂载</text><text x="930" y="245" font-size="22" fill="#4a1d1d">内核能力</text><text x="930" y="455" font-size="22" fill="#4a1d1d">宿主机边界</text><line x1="320" y1="235" x2="470" y2="300" stroke="#dc2626" stroke-width="5"/><line x1="320" y1="445" x2="470" y2="355" stroke="#dc2626" stroke-width="5"/><line x1="880" y1="235" x2="730" y2="300" stroke="#dc2626" stroke-width="5"/><line x1="880" y1="445" x2="730" y2="355" stroke="#dc2626" stroke-width="5"/></svg>