[Mailman-Developers] PHP wrappers?

[Thomas Wouters]

On Wed, Mar 14, 2001 at 03:08:12PM -0500, Ron Jarrell wrote:
> At 10:04 AM 3/14/01 -0800, Harold Paulson wrote:
> 
> >IOError: [Errno 13] Permission denied: '/usr/local/mailman/lists/myfirstlist/config.db'
> >
> >Which makes sense.  The config.db file is 660 root.mailman.  I guess that is why all the mailman CGIs run with setgid mailman.  I guess that leaves me at an impasse.  I probably shouldn't give the web server elevated permissions for my little hacks.

> Add your www user to the mailman group...

You should *not* do that. That gives the normal webserver way too much
permissions. You should just use a setuid mailman wrapper
script that does caller-checking to see if it's called correctly, by the
right user, and with 'safe' values.

-- 
Thomas Wouters <thomas@xs4all.net>

Hi! I'm a .signature virus! copy me into your .signature file to help me spread!