Re: [Mailman-Users] CGI account shouldn't be part ofmailman group, but...

2005-07-12 Thread Poster
John Dennis said: > Just to expand a bit on something I should have elaborated: > > There is exactly one member of the mailman group, the user mailman. > When > the MTA or web server want to perform a mailman operation it invokes > what is called a wrapper. The wrappers are group mailman and are >

Re: [Mailman-Users] CGI account shouldn't be part ofmailman group, but...

2005-07-12 Thread John Dennis
On Tue, 2005-07-12 at 19:20 -0400, Poster wrote: > OK. If I'm following this correctly, Mailman is run as setgid Mailman, > so whatever calls it acts as though it were in the Mailman group. To > prevent abuse of this, Mailman allows only those who pass its security > check to call it. > > I'm runn