On 06/16/2014 01:45 PM, Lindsay Haisley wrote: > > If you have shell access on a Mailman host you can pretty much do as you > wish, including circumventing a lot of Mailman's privacy walls, all > without having system root access. This is both good and bad, > obviously, and is mostly an argument for being cautious about who has > terminal access on a server running Mailman.
You still need sufficient access. E.g., config.pck files are not world readable, at least in a normal install, so you need to be root or in Mailman's group to access list information. Also, we tell you how to protect archives/private/ from non-root/mailman access by local users. -- Mark Sapiro <m...@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
