diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 554ca2c..538a59a 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -1,6 +1,14 @@
 {
   "image": "mcr.microsoft.com/devcontainers/javascript-node:24",
-  "privileged": true,
+  "runArgs": [
+    "--device=/dev/fuse",
+    "--security-opt", "apparmor=unconfined",
+    "--security-opt", "seccomp=unconfined"
+  ],
+
+  "capAdd": [
+    "SYS_ADMIN"
+  ],
   "name": "Obsidian Timecodes Plugin",
   "postCreateCommand": "pnpm install",