On 12/06/2010 07:30 PM, Mark Sapiro wrote:
Robert Moskowitz wrote:
Through trail and error, user apache needed access.

Should user apache be added to the mailman group, as the files seem to
have root:mailman or mailman:mailman as their owners?

The way this is supposed to work is all the files in
/usr/lib/mailman/cgi-bin/ are compiled wrappers that are supposed to
be group 'mailman' and SETGID. Thus, when they are invoked through
Apache's ScriptAlias, they run with effective group 'mailman'. See the
FAQ at<http://wiki.list.org/x/tYA9>  for more detail.

You should not add user 'apache' to the 'mailman' group. This could
potentially give public access to things which aren't public.

Ah,  OK got it....

Well hopefully one more time to get it right the first time...

:)


------------------------------------------------------
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to