
On 10/27/19 9:24 PM, Stephen J. Turnbull wrote:
It appears this process is running as www-data. Does /var/lib/mailman/locks exist? Is it a directory? Is it readable and writable as a directory by www-data or www-data's group? Is it on a local disk, or some kind of network file system?
Actually, the owner of /var/lib/mailman/locks doesn't matter. The key requirement is its group is Mailman's group ('mailman', 'list', whatever Mailman runs as)
SCRIPT_NAME: /virtualmin-mailman/unauthenticated/admindb.cgi
This is not provided by Mailman, I suspect, unless it's a link to a Mailman script. What does it do? Is it just a call to /var/lib/mailman/scripts/driver?
This is probably the standard CGI wrapper for admindb. It too should be Mailman's group and SETGID.
Does the admin URL have the same error?