
On Jul 24, 2019, at 2:04 PM, Mark Sapiro <mark@msapiro.net> wrote:
On 7/24/19 10:44 AM, Robert Kudyba wrote:
So no when trying to log in to the ~/mailman/admindb/mailman admin page I get the below error, notice it’s a different permission problem:
Jul 24 13:41:51 2019 admin(5113): @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ admin(5113): [----- Mailman Version: 2.1.29 -----] admin(5113): [----- Traceback ------] admin(5113): Traceback (most recent call last): admin(5113): File "/usr/lib/mailman/scripts/driver", line 117, in run_main admin(5113): main() admin(5113): File "/usr/lib/mailman/Mailman/Cgi/admindb.py", line 345, in main admin(5113): mlist.Save() admin(5113): File "/usr/lib/mailman/Mailman/MailList.py", line 613, in Save admin(5113): self.__save(dict) admin(5113): File "/usr/lib/mailman/Mailman/MailList.py", line 590, in __save admin(5113): os.link(fname, fname_last) admin(5113): OSError: [Errno 1] Operation not permitted
the admindb script is trying to save the list to do this, it first creates a temporary config.pck.tmp.hhh.ppp file there hhh is the host name and ppp is the PID of the process and writes the data to that. It then unlinks (removes) config.pck.last, links config.pck to config.pck.last and finally renames config.pck.tmp.hhh.ppp to config.pck.
In your case it is the linking of config.pck to config.pck.last that is failing.
All these files should be group 'mailman' and group writable and the process should be running with effective group 'mailman’.
By “these files” do you mean in /usr/lib/mailman? Those definitely did not have group write permissions. Do these files also need suid?
Did you see my reply about the file system needing to be mounted suid?
Yes I did an responded in line with the permissions of the sub-directories and files: ls -l /usr/lib/mailman/cgi-bin/ total 264 -rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 admin -rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 admindb -rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 confirm -rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 create -rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 edithtml -rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 listinfo -rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 options -rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 private -rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 rmlist -rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 roster -rwxr-sr-x 1 mailman mailman 23056 Feb 12 06:54 subscribe ls -l /usr/lib/mailman/mail total 24 -rwxr-sr-x 1 mailman mailman 23176 Feb 12 06:54 mailman ls -l /usr/lib/mailman/mail/ total 24 -rwxr-sr-x 1 mailman mailman 23176 Feb 12 06:54 mailman ls -l /usr/lib/mailman/mail/mailman -rwxr-sr-x 1 mailman mailman 23176 Feb 12 06:54 /usr/lib/mailman/mail/mailman