Separating executables from data

Attached is a patch against v1.0b11 which allows me to configure mailman with all executables installed on a read-only filesystem.
The patch also has a few tests in configure.in nobbled, because I build on a different machine to the one that runs lists. (The mailman uid and gid tests seem to be superfluous anyway, as the only time the results are used in the code is in a Makefile rule that is never called). The FQDN and URL parameters have been hard-coded to a fixed string that I then edit with sed on the target machine when I install the RPM. I have left these changes in for completeness.
I also include my RPM spec file. It has some vaguely interesting parts that are probably specific to my configuration (ie executables have to be in a directory owned by root and not writable by anyone else, due to Trusted Path Execution patches, and the mm_cfg.py has to be on a writable filesystem, hence the symlink into /etc)
Even if these patches don't make it into the code, I'd appreciate it if someone could point out any potential problems with my configuration :-)
- Dick
PS I would have submitted these patches by jitterbug, but I couldn't see any way of attaching files there.
participants (1)
-
Dick Porter