From a1bdd5f40e15312bb4891cfa2e0d67d590051d00 Mon Sep 17 00:00:00 2001 From: Frank Meerkoetter Date: Thu, 1 Dec 2016 19:45:26 +0100 Subject: redis: do not run as root Running a network facing daemon written in C as root is not a good idea. Introduce a redis system user/group for that. A drawback is that now redis can no longer increase the number of open fds to 10000 (MaxClients). If this is needed the ulimit needs to be tweaked in the init script or systemd unit file. This only affects systemd based systems. Signed-off-by: Frank Meerkoetter Signed-off-by: Martin Jansa --- meta-oe/recipes-extended/redis/redis/redis.service | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'meta-oe/recipes-extended/redis/redis') diff --git a/meta-oe/recipes-extended/redis/redis/redis.service b/meta-oe/recipes-extended/redis/redis/redis.service index e2dc6a7156..577bb1421d 100644 --- a/meta-oe/recipes-extended/redis/redis/redis.service +++ b/meta-oe/recipes-extended/redis/redis/redis.service @@ -3,8 +3,8 @@ Description=Redis In-Memory Data Store After=network.target [Service] -User=root -Group=root +User=redis +Group=redis ExecStart=/usr/bin/redis-server /etc/redis/redis.conf ExecStop=/usr/bin/redis-cli shutdown Restart=always -- cgit 1.2.3-korg