Timeline for Which WP-CLI commands can be safely run with --allow-root flag?
Current License: CC BY-SA 4.0
5 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
May 15 at 12:55 | history | edited | Tom J Nowell♦ | CC BY-SA 4.0 |
added 76 characters in body
|
Apr 5 at 11:39 | history | edited | Tom J Nowell♦ | CC BY-SA 4.0 |
added 120 characters in body
|
Apr 5 at 11:39 | comment | added | Tom J Nowell♦ |
noroot is just an example from my own stuff, there are lots of ways to run WP CLI without using the root user, not using root at all being the optimal but I can't second guess guess every single Linux ecosystem out there. Eitherway running WP CLI as root is never safe, all commands are insecure and unsafe to run as root, even with the flags to not load plugins and themes ( MU plugins, maliciously modified core files, dropins etc can all contain malware )
|
|
Apr 5 at 9:41 | comment | added | Jesse Nickles |
Or perhaps just aliasing wp to avoid having to type noroot in your example? Anyway, my main question concerns cron jobs, I think su [username] is the only way to do something similar from the root crontab: serverfault.com/questions/352835/…
|
|
Mar 28 at 17:48 | history | answered | Tom J Nowell♦ | CC BY-SA 4.0 |