News for hackers. Stuff that matters.
Re:An unexpected Redis sandbox escape affecting Debian-based... by luto on Wednesday March 09, 2022 @12:23PM (#30617273)
redis-server is just a plain executable. Unless you're putting it in a sandbox yourself - for example, using a VM or systemd features - redis has no sandbox. There is nothing to escape from.

The Lua interpreter _within_ redis acts as a sandbox, which got a bit mangled here. Most features are not implemented in Lua, though. So this is only used for things like the EVAL command.

There are no comments on this comment yet.