Having write access on anything you can read should be enough if libraries or binaries are shared (read-only) between the host and container.