You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-[A few things about Redis security by antirez](http://antirez.com/news/96)
16
16
17
+
## Process User and Privileges
18
+
19
+
By default, the Redis Docker image drops privileges by switching to the redis user and removing unnecessary capabilities. This step is skipped if Docker is run with the `--user` option or if you set the `SKIP_DROP_PRIVS=1` (since 8.0.2) environment variable.
20
+
21
+
Note: Using `SKIP_DROP_PRIVS` is not recommended, as it reduces the container's security.
22
+
17
23
# How to use this image
18
24
19
25
## Start a redis instance
@@ -32,6 +38,20 @@ There are several different persistence strategies to choose from. This one will
32
38
33
39
For more about Redis persistence, see [the official Redis documentation](https://redis.io/docs/latest/operate/oss_and_stack/management/persistence/).
34
40
41
+
### File and Directory Permissions
42
+
43
+
Redis will attempt to correct the ownership and permissions of the data and configuration (since 8.0.2) directories and files if they are not set correctly. This adjustment is only performed in basic, default scenarios to avoid interfering with custom or user-specific configurations.
44
+
45
+
You can skip this step by setting the `SKIP_FIX_PERMS=1`(since 8.0.2) environment variable.
46
+
47
+
### Manually Setting File and Directory Permissions
48
+
49
+
If you prefer to handle file permissions yourself, you can use a `docker run` command to set the correct ownership on mounted volumes. For example:
0 commit comments