diff --git a/docker/docker-compose.middleware.yaml b/docker/docker-compose.middleware.yaml
index af12e86fe6..f85f188bb9 100644
--- a/docker/docker-compose.middleware.yaml
+++ b/docker/docker-compose.middleware.yaml
@@ -56,6 +56,8 @@ services:
     image: langgenius/dify-sandbox:latest
     restart: always
     cap_add:
+      # Why is sys_admin permission needed?
+      # https://docs.dify.ai/getting-started/install-self-hosted/install-faq#id-16.-why-is-sys_admin-permission-needed
       - SYS_ADMIN
     environment:
       # The DifySandbox configurations
diff --git a/docker/docker-compose.yaml b/docker/docker-compose.yaml
index e9c9d170bd..464ff1cf40 100644
--- a/docker/docker-compose.yaml
+++ b/docker/docker-compose.yaml
@@ -317,6 +317,8 @@ services:
     image: langgenius/dify-sandbox:latest
     restart: always
     cap_add:
+    # Why is sys_admin permission needed?
+    # https://docs.dify.ai/getting-started/install-self-hosted/install-faq#id-16.-why-is-sys_admin-permission-needed
       - SYS_ADMIN
     environment:
       # The DifySandbox configurations