Todd Zullinger ha scritto:
> Manlio Perillo wrote:
>>> I hit the problem described in the FAQ 6.9.
>>>
>>> However I don't want to
>>> chmod 0666 data/aliases*
> 
> Yuck.  Nor would I.  That shouldn't even be in the FAQ, AFAIAC.
> 

A mistake?

>>> A better solution, IMHO, is:
>>> chmod 0660 data/aliases.db
>>> chmod 0660 data/virtual-mailman.db
>>> adduser www-data list
> 
> Really, since you're using a Debian package, the proper permissions
> and groups should be setup by the package.  If there isn't already a
> Debian bug filed for this, it seems like there ought to be.  If I were
> a Debian user, I'd file it.
> 

Yes, I will do it.
I just forget to ask if this could be a debian package bug.
Maybe there is a better solution.

> [...]
> I'm not picking on Debian or implying that they're wrong to change
> things to fit better within their system, just noting that the problem
> is something that should be fixed in the Debian packaging.  The same
> is true for any other vendor that packages Mailman.
> 

Yes.
But I'm sure I'm not the only one to use Mailman on a Debian!
Nobody hits this problem?
All of them use newlist to create a new mailing list?

> All that said, I *think* that you ought to be able to use the general
> solution in the FAQ, but instead of using chown mailman:mailman, use
> chown root:list (or whatever user and group Debian installs mailman
> under.  

No.
This is already the default setting.
Owner: root
Group: list

Also, aliases and virtual-mailman have the "right" permission.
The only problem, as I can see, is that the hash files are not group
writeable.


> There shouldn't be a need to chmod anything to 0666.  That's
> an accident waiting to happen.
> 

But if the files are not group writeable, how can the CGI script modify
them?




Regards  Manlio Perillo
------------------------------------------------------
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp

Reply via email to