On Wed, Mar 14, 2001 at 03:08:12PM -0500, Ron Jarrell wrote:
> At 10:04 AM 3/14/01 -0800, Harold Paulson wrote:
>
> >IOError: [Errno 13] Permission denied:
>'/usr/local/mailman/lists/myfirstlist/config.db'
> >
> >Which makes sense. The config.db file is 660 root.mailman. I guess that is why
>all the mailman CGIs run with setgid mailman. I guess that leaves me at an impasse.
>I probably shouldn't give the web server elevated permissions for my little hacks.
> Add your www user to the mailman group...
You should *not* do that. That gives the normal webserver way too much
permissions. You should just use a setuid mailman wrapper
script that does caller-checking to see if it's called correctly, by the
right user, and with 'safe' values.
--
Thomas Wouters <[EMAIL PROTECTED]>
Hi! I'm a .signature virus! copy me into your .signature file to help me spread!
_______________________________________________
Mailman-Developers mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-developers
