Robert Moskowitz wrote:
>
>Through trail and error, user apache needed access.
>
>Should user apache be added to the mailman group, as the files seem to 
>have root:mailman or mailman:mailman as their owners?


The way this is supposed to work is all the files in
/usr/lib/mailman/cgi-bin/ are compiled wrappers that are supposed to
be group 'mailman' and SETGID. Thus, when they are invoked through
Apache's ScriptAlias, they run with effective group 'mailman'. See the
FAQ at <http://wiki.list.org/x/tYA9> for more detail.

You should not add user 'apache' to the 'mailman' group. This could
potentially give public access to things which aren't public.

-- 
Mark Sapiro <m...@msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

------------------------------------------------------
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to