- 19 Dec, 2021 1 commit
-
-
YaacovHazan authored
Block sensitive configs and commands by default. * `enable-protected-configs` - block modification of configs with the new `PROTECTED_CONFIG` flag. Currently we add this flag to `dbfilename`, and `dir` configs, all of which are non-mutable configs that can set a file redis will write to. * `enable-debug-command` - block the `DEBUG` command * `enable-module-command` - block the `MODULE` command These have a default value set to `no`, so that these features are not exposed by default to client connections, and can only be set by modifying the config file. Users can change each of these to either `yes` (allow all access), or `local` (allow access from local TCP connections and unix domain connections) Note that this is a **breaking change** (specifically the part about MODULE command being disabled by default). I.e. we don't consider DEBUG command being blocked as an issue (people shouldn't have been using it), and the few configs we protected are unlikely to have been set at runtime anyway. On the other hand, it's likely to assume some users who use modules, load them from the config file anyway. Note that's the whole point of this PR, for redis to be more secure by default and reduce the attack surface on innocent users, so secure defaults will necessarily mean a breaking change.
-
- 19 Dec, 2016 1 commit
-
-
antirez authored
-
- 10 Jul, 2014 1 commit
-
-
antirez authored
This way as a side effect of running the test we also stress the latency monitor data collection.
-
- 12 Jun, 2013 1 commit
-
-
Marc-Antoine Perennou authored
Signed-off-by:
Marc-Antoine Perennou <Marc-Antoine@Perennou.com>
-
- 15 May, 2013 1 commit
-
-
antirez authored
Required because of recent changes in the way logfile is set to standard output.
-
- 04 Apr, 2013 1 commit
-
-
antirez authored
-
- 05 Feb, 2013 1 commit
-
-
antirez authored
-
- 28 Jan, 2013 3 commits
-
-
antirez authored
-
antirez authored
When keyspace events are enabled, the overhead is not sever but noticeable, so this commit introduces the ability to select subclasses of events in order to avoid to generate events the user is not interested in. The events can be selected using redis.conf or CONFIG SET / GET.
-
antirez authored
-
- 29 Mar, 2012 1 commit
-
-
Xiaochen Wang authored
-
- 10 Mar, 2012 1 commit
-
-
antirez authored
-
- 25 Jun, 2011 1 commit
-
-
antirez authored
-
- 09 Jan, 2011 1 commit
-
-
antirez authored
-
- 03 Jan, 2011 1 commit
-
-
antirez authored
-
- 02 Jan, 2011 1 commit
-
-
antirez authored
-
- 20 May, 2010 1 commit
-
-
Pieter Noordhuis authored
-
- 14 May, 2010 2 commits
-
-
antirez authored
-
Pieter Noordhuis authored
-
- 10 May, 2010 1 commit
-
-
antirez authored
-
- 07 May, 2010 2 commits
-
-
Pieter Noordhuis authored
-
antirez authored
-
- 06 May, 2010 1 commit
-
-
antirez authored
-
- 22 Apr, 2010 1 commit
-
-
antirez authored
-
- 15 Apr, 2010 1 commit
-
-
antirez authored
-
- 09 Apr, 2010 1 commit
-
-
antirez authored
-
- 02 Apr, 2010 1 commit
-
-
antirez authored
-
- 20 Mar, 2010 1 commit
-
-
Jeremy Zawodny authored
-
- 07 Mar, 2010 1 commit
-
-
antirez authored
-
- 27 Feb, 2010 1 commit
-
-
antirez authored
-
- 10 Feb, 2010 1 commit
-
-
antirez authored
-
- 06 Feb, 2010 1 commit
-
-
antirez authored
multi bulk requests in redis-benchmark, default fsync policy changed to everysec, added a prefix character for DEBUG logs
-
- 15 Jan, 2010 1 commit
-
-
antirez authored
support for named VM swap file. Fixed a few important interaction issues between the background saving processes and IO threads
-
- 12 Jan, 2010 1 commit
-
-
antirez authored
-
- 09 Jan, 2010 1 commit
-
-
antirez authored
-
- 07 Jan, 2010 3 commits
- 06 Jan, 2010 2 commits