• antirez's avatar
    Sentinel: add an option to deny online script reconfiguration. · befcbfbe
    antirez authored
    The ability of "SENTINEL SET" to change the reconfiguration script at
    runtime is a problem even in the security model of Redis: any client
    inside the network may set any executable to be ran once a failover is
    triggered.
    
    This option adds protection for this problem: by default the two
    SENTINEL SET subcommands modifying scripts paths are denied. However the
    user is still able to rever that using the Sentinel configuration file
    in order to allow such a feature.
    befcbfbe
sentinel.conf 7.74 KB