TMA-REDIS-PROTECTED-MODE
Ensure protected-mode is enabled
HighLevel 1Automatedredis
Description
protected-mode refuses external connections when no password is set.
How it is checked
Audit method: File pattern
- File
/etc/redis/redis.conf- Pattern
(?m)^\s*protected-mode\s+yes\b
How it is fixed
Fix method: File edit
- File
/etc/redis/redis.conf- Replacement line
protected-mode yes
Properties
- Operating systems
- Any
- Tags
- databaseredis
- Reference
- CIS Redis Benchmark - Network Security
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target redis