Jan Steinman wrote: > >I put 'list_members -f -p NewsletterName | sort -d -b -f' in a php >script with secret URL for her to use, but it is failing with >"Permission denied: '/private/var/mailman/lists/newslettername/ >config.pck'." > >Should I simply change perms on that file (and any others that may >come up once that one can be read), or is there a better way of >accomplishing this goal?
You can't change permissions because these files are continually being re-created, and the change won't stick. Your php script runs as the web server user and that user does not have permission on these files, and you don't want it to for security reasons. Mailman itself accesses all its CGIs via SETGID wrappers which run as group 'mailman' which is how Mailman's security works. See the FAQ at <http://wiki.list.org/x/tYA9>. I don't think you can do this directly with php because SETGID won't work on a php script. I suppose you could build a compiled SETGID wrapper to invoke command line php, but it would be just as easy to just invoke a shell to run those commands directly from a compiled SETGID CGI. -- Mark Sapiro <[EMAIL PROTECTED]> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://wiki.list.org/x/QIA9