diff --git a/pkg/agent/sandbox/container.go b/pkg/agent/sandbox/container.go
index c23ffbcd6..408e23f1b 100644
--- a/pkg/agent/sandbox/container.go
+++ b/pkg/agent/sandbox/container.go
@@ -653,7 +653,7 @@ func (f *containerFS) WriteFile(ctx context.Context, p string, data []byte, mkdi
 	defer attach.Close()
 
 	// Write data to the hijacked connection's stdin
-	if _, err := attach.Conn.Write(data); err != nil {
+	if _, err = attach.Conn.Write(data); err != nil {
 		return fmt.Errorf("failed to write data to container: %w", err)
 	}
 
diff --git a/pkg/config/defaults.go b/pkg/config/defaults.go
index 72810206d..01c7592a6 100644
--- a/pkg/config/defaults.go
+++ b/pkg/config/defaults.go
@@ -43,6 +43,7 @@ func DefaultConfig() *Config {
 						ApparmorProfile: "",
 						DNS:             []string{},
 						ExtraHosts:      []string{},
+						CapDrop:         []string{"ALL"},
 						Binds:           []string{},
 					},
 					Prune: AgentSandboxPruneConfig{