Stefan Förster wrote:
> 
> Since Mailman's "bin" directory has 755 permissions on Debian, every
> user can attempt to run these commands. Most directories (except
> private archives) in /var/lib/mailman have world read/execute
> permissions, but it seems that the actual data is owned by group
> "list" and only readable by group/owner. So running either
> "list_lists" or "list_members <listname>" result in a EPERM traceback.


It's the same in the source install. The only difference appears to be
Debian's addition of symlinks in /usr/sbin/.

-- 
Mark Sapiro <m...@msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

------------------------------------------------------
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9

Reply via email to