Just in case this is useful for someone, I wrote the following quick doc
for using mailman on a linux/grsec kernel

----------------------------------------------------------------------------
Steps you need to take to run mailman on a linux grsecurity protected kernel

1) Install and run securelinux_fix.py -f

2) Grsecurity will not run binaries if the directory they're in is writable
   by a user other than root:
   panoramix:/var/local/mailman/mail# chown root.mailman .
   panoramix:/var/local/mailman/mail# chmod 755 .
   panoramix:/var/local/mailman/mail# chattr +i .

3) Apply the same fix to the CGIs
   panoramix:/var/local/mailman/cgi-bin# chown root.mailman .
   panoramix:/var/local/mailman/cgi-bin# chmod 755 .
   panoramix:/var/local/mailman/cgi-bin# chattr +i .

Marc <[EMAIL PROTECTED]> -- 2001/12/04
----------------------------------------------------------------------------
-- 
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
  
Home page: http://marc.merlins.org/   |   Finger [EMAIL PROTECTED] for PGP key

------------------------------------------------------
Mailman-Users maillist  -  [EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users

Reply via email to