Re: [Mailman-Developers] [Mailman-Users] any info onthisreportedexploit?

2006-02-01 Thread Tokio Kikuchi
Mark Sapiro wrote: >>Mark Sapiro wrote: >> >> >>>++ if not t[7]: >>>++ t = t[:7] + (1,) +t[8:] >> >>On second thought, that should be >> >> if t and not t[7] >> t = t[:7] + (1,) +t[8:] > > > I seem to be having a lot of trouble with this. Make that > > if t and not t[7]: >

Re: [Mailman-Developers] [Mailman-Users] Permission of data/bounce-events-?????.pck

2006-02-01 Thread imacat
I could use a little explanation on this issue. I was checking my system for world-writable files, and found lots of data/bounce-events-?.pck that are world-writable: [EMAIL PROTECTED] ~ % ls -lt /var/lib/mailman/data | grep 'rw. ' -rw-rw-rw- 1 list list 0 2006-01-31 01:26 boun

Re: [Mailman-Developers] [Mailman-Users] Permission of data/bounce-events-?????.pck

2006-02-01 Thread Mark Sapiro
imacat wrote: > >I noted that in the source of mailman 2.1.7 there are 2 lines in >bin/mailmanctl: > >line 421-422 ># Clear our file mode creation umask >os.umask(0) > >Is this intended? Is it the reason why data/bounce-events-?.pck >are world-writable? It looks like y