Upstream Redis doesn't. At least in my builds from upstream, luaopen_package and luaopen_os aren't even available on the binary. Debian does things differently, though. They need package in order to require the "json" and "bit" libraries, which are packaged separately on Debian.
Another thing that would be interesting and affect upstream as well would be getting the "debug" package back from the redis error function.
Comments
Mrh why does Redis include the package library? IMO packages should be loaded at boot via configuration. This is Lua hardening 101...
Good writeup. Thank you.
Upstream Redis doesn't. At least in my builds from upstream, luaopen_package and luaopen_os aren't even available on the binary. Debian does things differently, though. They need package in order to require the "json" and "bit" libraries, which are packaged separately on Debian.
Another thing that would be interesting and affect upstream as well would be getting the "debug" package back from the redis error function.
Ohhh okay I see. Wow :( Thanks for the clarification.