https://bugzilla.wikimedia.org/show_bug.cgi?id=40739

Daniel Kinzler <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #2 from Daniel Kinzler <[email protected]> 2012-10-05 
13:41:06 UTC ---
If you are root, you can "become" another user from inside php:
http://php.net/manual/en/function.posix-setuid.php

However, beware the consequences. For instance, if the pid file was written as
root, it may not be readable once the script runs as ordinary user.

But... 

* why is it not sufficient to just call the script as a different user?
* Why do you thing SGID is a security risk? SUID is, but SGID should be safe
enough: http://www.library.yale.edu/wsg/docs/permissions/sgid.htm
* SUID does not work on script files at all. 
* You should probably add www-data to the wikidata group (and/or vice versa?)

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to