Here is what Katie proposed so that we stop running the script as root:
- create a new user on the systems, such as "wikidata", with some shared password. We can "su wikidata" (or "sudo -u wikidata" ) and run things as that user, such as pollforchanges.
- put user "wikidata" it into group: www-data
- change permissions on all our mediawiki instances to:
chown -Rf wikidata:www-data /var/www
sudo chmod -R g+s /var/www (I'm not 100% sure about this but think it's right)
Version: unspecified
Severity: normal