0

I just installed redis on an Ubuntu server. When I examined its file permissions, I saw

-rw-r----- 1 redis redis 59124 Jan 11 02:24 /etc/redis/redis.conf

  1. Why does the redis user need write access to the conf file?
  2. Would it be more secure to change the permissions to -r--r-----? If so, what are the downsides (if any) to doing this?
Improve this question

1 Answer 1

Reset to default
1

A little late, but I expect this is because the command CONFIG REWRITE was introduced in Redis 2.8.0 which rewrites the redis.conf file to match the currently configured process.

Improve this answer
2
  • Thanks! This seems like even more reason to do rename-command CONFIG ""
    – tcjulian
    Commented Jan 31, 2019 at 4:22
  • I would recommend renaming it to a guid only you (or other redis admins) know, since being able to change config values without restarting the server is very valuable when making a highly-available service.
    – Adam
    Commented Feb 11, 2019 at 18:44

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .