On 10/27/19 9:24 PM, Stephen J. Turnbull wrote:
> 
> It appears this process is running as www-data.  Does
> /var/lib/mailman/locks exist?  Is it a directory?  Is it readable and
> writable as a directory by www-data or www-data's group?  Is it on a
> local disk, or some kind of network file system?

Actually, the owner of /var/lib/mailman/locks doesn't matter. The key
requirement is its group is Mailman's group ('mailman', 'list', whatever
Mailman runs as)

>  > SCRIPT_NAME: /virtualmin-mailman/unauthenticated/admindb.cgi
> 
> This is not provided by Mailman, I suspect, unless it's a link to a
> Mailman script.  What does it do?  Is it just a call to
> /var/lib/mailman/scripts/driver?

This is probably the standard CGI wrapper for admindb. It too should be
Mailman's group and SETGID.

Does the admin URL have the same error?

-- 
Mark Sapiro <m...@msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan
------------------------------------------------------
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to