Containers are just processes running on the host where the process has a different view of the world from the "host". The host can see all and do all.