Your message dated Wed, 10 Dec 2008 22:16:46 +0100
with message-id <[EMAIL PROTECTED]>
and subject line Fixed long ago
has caused the Debian Bug report #396537,
regarding mailman: README.Exim4.Debian needs to mention groups
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)


-- 
396537: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396537
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: mailman
Version: 2.1.9-2
Severity: normal
Tags: patch

Hi,

After followign the instructions, I got a traceback when creating a
list via the web interface which came down to 

admin(510): RuntimeError: command failed: chgrp Debian-exim
/var/lib/mailman/data/virtual-mailman (status: 1, Operation not
permitted)admin

The problem was the webserver user, www-data, doesn't have permissions
to do that chgrp.

I'd like to suggest something like the following.  I'm not sure if it
has secuirty impliciations; I'd like suggestions for any other
work-arounds.

Thanks!

-i

--- README.Exim4.Debian.old     2006-11-01 22:35:33.000000000 +1100
+++ README.Exim4.Debian 2006-11-01 22:42:44.000000000 +1100
@@ -10,6 +10,15 @@
 
 and list all your Mailman domains in "POSTFIX_STYLE_VIRTUAL_DOMAINS".
 
+When a new group is created, the correct aliases will be written into
+the file /var/lib/mailman/data/virtual-mailman.  The above chgrp
+command is run as the webserver (usually www-data), however
+Debian-exim needs to be able to access this file.  To allow the
+www-data to do the chgrp command, add the www-data to the Debian-exim
+group; e.g. in /etc/group should have a line similar to
+
+Debian-exim:x:105:www-data
+
 Put this in your exim4 main configuration (if you use a split config,
 for example /etc/exim4/conf.d/main/04_local_mailman_macros)
 



-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ISO-8859-1)


--- End Message ---
--- Begin Message ---
This was actually fixed back in 2006, with the following text:

 Please note that the chgrp command above will not work when creating a
 list in the web interface: the user www-data will not be allowed to do
 this. You can circumvent this problem by creating new lists with the
 'newlist' command line command or using instead:
 POSTFIX_MAP_CMD = 'chmod o+r'
 This will allow local users (with shell access to the list server) to
 see the list of all Mailman mailing lists, but not much more.

Which has far less security implications than adding www-data to group
Debian-exim.

-- 
Lionel


--- End Message ---

Reply via email to