Kss, being compromised by a script kiddie is bad.<p>But I am puzzled: a running process like redis is supposed to run in a chroot, and &#x2F;tmp is supposed to always be mounted with no exec, the chroot and process should have been runned with seteuid&#x2F;guid redis...<p>I normally have backend technologies confined in a jails with pf authorizing only inbound &amp; outbound traffic on the legitimate interface+port, and you need no ssh access in a jail.<p>Looks to me there is a cascade of sysadmins wrong practice.<p>Devops and modern &quot;full stack devs&quot; seems to have lost their basics.