On 06/16/2014 01:45 PM, Lindsay Haisley wrote:
If you have shell access on a Mailman host you can pretty much do as you wish, including circumventing a lot of Mailman's privacy walls, all without having system root access. This is both good and bad, obviously, and is mostly an argument for being cautious about who has terminal access on a server running Mailman.
You still need sufficient access. E.g., config.pck files are not world readable, at least in a normal install, so you need to be root or in Mailman's group to access list information. Also, we tell you how to protect archives/private/ from non-root/mailman access by local users.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan