From 1325568 at bugs.launchpad.net Mon Jun 2 14:19:09 2014 From: 1325568 at bugs.launchpad.net (Christian Burger) Date: Mon, 02 Jun 2014 12:19:09 -0000 Subject: [Bug 1325568] [NEW] pseudo anonymous list feature References: <20140602121909.27735.24830.malonedeb@gac.canonical.com> Message-ID: <20140602121909.27735.24830.malonedeb@gac.canonical.com> Public bug reported: Hey there, I wanted to have a pseudo anonymous list. Meaning: The sender's e-mail address is rewritten to the list's address, but the name in "From:" is set to the member's name stored in the mailing list database. It's an extension to the "anonymous_list" feature. Let's say we have a list 'exlist' sending from "examplelist at example.com" with a member "John Doe" writing from "john at example.net". If his name is set in the mailing list configuration, and "anonymous_list" as well as the "pseudo_anonymous_list" feature is turned on, the original "From:" in John Doe's messages is rewritten to "John Doe ". So his e-mail address stays private, but the message can be recognized easily as being from him. I don't know if that goes against any standards. Maybe it should be "John Doe via exlist " to emphasize the it is a list message. Just a thought. I didn't find a configuration providing that feature in mailman -- hope I did not overlook anything. I attached a small patch based upon http://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1436 I could take a shot at integrating it into the latest revision of the 2.1 branch if there is any interest in that feature. If you want to try the patch, you have to execute 'bin/withlist -r add_pseudo_anonymous_list -a' for old lists to have the new configuration value. I did not test the feature thoroughly, but it seems to work on my server. Thanks and bye, Christian ** Affects: mailman Importance: Undecided Status: New ** Patch added: "patch based upon branch 2.1 (rev 1436)" https://bugs.launchpad.net/bugs/1325568/+attachment/4124119/+files/pseudo_anonymous_list.patch -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1325568 Title: pseudo anonymous list feature To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1325568/+subscriptions From mark at msapiro.net Tue Jun 3 03:15:56 2014 From: mark at msapiro.net (Mark Sapiro) Date: Tue, 03 Jun 2014 01:15:56 -0000 Subject: [Bug 1325568] Re: pseudo anonymous list feature References: <20140602121909.27735.24830.malonedeb@gac.canonical.com> Message-ID: <20140603011556.4077.57754.malone@soybean.canonical.com> I think the from_is list feature introduced in Mailman 2.1.16 and in the 2.1.17 version that you patched against and further improved and augmented with a dmarc_moderatioin action feature in 2.1.18-1 does pretty much the same thing as your change. Is there some reason you think it doesn't? In 2.1.17, it does require enabling by putting ALLOW_FROM_IS_LIST = Yes in mm_cfg.py, but then I think the from_is_list Mung From action does what you want. ** Changed in: mailman Importance: Undecided => Medium ** Changed in: mailman Status: New => Fix Released ** Changed in: mailman Milestone: None => 2.1.16 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1325568 Title: pseudo anonymous list feature To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1325568/+subscriptions From 1325568 at bugs.launchpad.net Tue Jun 3 14:13:16 2014 From: 1325568 at bugs.launchpad.net (Christian Burger) Date: Tue, 03 Jun 2014 12:13:16 -0000 Subject: [Bug 1325568] Re: pseudo anonymous list feature References: <20140602121909.27735.24830.malonedeb@gac.canonical.com> Message-ID: <20140603121316.27915.87189.malone@gac.canonical.com> I agree that both features overlap. Maybe they overlap the same way as the anonymous_list and reply_goes_to_list feature? Both rewrite the reply-to address with the list address, but their intentions are differently. I hope I am able to show the difference, I think, there is: The intention of my patch is to provide some pseudo-identity on an anonymous_list. The intention of the from_is_list feature -- correct my if I am wrong -- is to agree with spam protection standards. What my propsal does differently is, that * it works hand in hand with anonymous_list quote from the documentation of from_is_list "It is not useful to apply actions other than No to an anonymous list, and if you do so, the result may be surprising." https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/head:/Mailman/Gui/General.py * it lets the list admin configure a name: sort of a pseudonym, if you like -- that way a (fixed) name is set even if the sender forgot to configure his/her e-mail client correctly (e. g. forget to set a name at all or accidentally set his/her real name) * the rewrite by from_is_list is not stored in the archives according to the changelog of 2.1.18 https://launchpad.net/mailman/+milestone/2.1.18 and this bug https://bugs.launchpad.net/mailman/+bug/1311431 but I think that would defeat the purpose of (pseudo) anonymization. Maybe "pseudonymous_list" would be a more fitting description for the configuration value or the value could be integrated into the "anonymous_list" configuration? Like this: [x] no [ ] anonymous [ ] pseudonymous That way it might add less complexity to the mailing list configuration than when it is a separate configuration value. -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1325568 Title: pseudo anonymous list feature To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1325568/+subscriptions From mark at msapiro.net Tue Jun 3 21:06:43 2014 From: mark at msapiro.net (Mark Sapiro) Date: Tue, 03 Jun 2014 19:06:43 -0000 Subject: [Bug 1325568] Re: pseudo anonymous list feature References: <20140602121909.27735.24830.malonedeb@gac.canonical.com> Message-ID: <20140603190643.27468.37812.malone@gac.canonical.com> OK. I see that your intent is different from that of the from_is_list feature which is solely intended for mitigation of bounce issues when a post is From: a domain that publishes a DMARC p=reject policy. However, the whole point of the anonymous_list feature in Mailman is to allow a list where the poster is not identified. The need for such arises for example with a list intended for posting anonymous complaints or a list offering support for victims of domestic violence. I think I understand your desire to identify the poster, even with only a list pseudnym, while completely removing the poster's email address, but I don't see it having enough general interest to warrant the additional configuration complication. ** Changed in: mailman Importance: Medium => Wishlist ** Changed in: mailman Status: Fix Released => Won't Fix ** Changed in: mailman Milestone: 2.1.16 => None -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1325568 Title: pseudo anonymous list feature To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1325568/+subscriptions From 1325568 at bugs.launchpad.net Tue Jun 3 21:51:53 2014 From: 1325568 at bugs.launchpad.net (Christian Burger) Date: Tue, 03 Jun 2014 19:51:53 -0000 Subject: [Bug 1325568] Re: pseudo anonymous list feature References: <20140602121909.27735.24830.malonedeb@gac.canonical.com> Message-ID: <20140603195153.4657.18413.malone@soybean.canonical.com> Okay, understood. Thanks for the consideration anyway. -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1325568 Title: pseudo anonymous list feature To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1325568/+subscriptions From mark at msapiro.net Fri Jun 6 22:04:01 2014 From: mark at msapiro.net (Mark Sapiro) Date: Fri, 06 Jun 2014 20:04:01 -0000 Subject: [Bug 1327404] [NEW] Mailman's log files are world readable References: <20140606200402.4310.81326.malonedeb@soybean.canonical.com> Message-ID: <20140606200402.4310.81326.malonedeb@soybean.canonical.com> Public bug reported: Mailman creates log files with permissions -rw-rw-r--. This allows possibly untrusted local users to read those logs and possibly find sensitive information therein. The same is true of lists/LISTNAME/request.pck files. ** Affects: mailman Importance: Medium Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1327404 Title: Mailman's log files are world readable To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1327404/+subscriptions From mark at msapiro.net Fri Jun 6 22:12:13 2014 From: mark at msapiro.net (Mark Sapiro) Date: Fri, 06 Jun 2014 20:12:13 -0000 Subject: [Bug 1327404] Re: Mailman's log files are world readable References: <20140606200402.4310.81326.malonedeb@soybean.canonical.com> Message-ID: <20140606201214.18322.49964.launchpad@soybean.canonical.com> ** Description changed: Mailman creates log files with permissions -rw-rw-r--. This allows possibly untrusted local users to read those logs and possibly find sensitive information therein. - The same is true of lists/LISTNAME/request.pck files. + The same is true of lists/LISTNAME/request.pck files and data/heldmsg-* + files. -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1327404 Title: Mailman's log files are world readable To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1327404/+subscriptions From 1327404 at bugs.launchpad.net Fri Jun 6 22:36:06 2014 From: 1327404 at bugs.launchpad.net (Launchpad Bug Tracker) Date: Fri, 06 Jun 2014 20:36:06 -0000 Subject: [Bug 1327404] Re: Mailman's log files are world readable References: <20140606200402.4310.81326.malonedeb@soybean.canonical.com> Message-ID: <20140606203611.8354.45269.launchpad@ackee.canonical.com> ** Branch linked: lp:mailman/2.1 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1327404 Title: Mailman's log files are world readable To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1327404/+subscriptions From mark at msapiro.net Fri Jun 6 22:38:05 2014 From: mark at msapiro.net (Mark Sapiro) Date: Fri, 06 Jun 2014 20:38:05 -0000 Subject: [Bug 1327404] Re: Mailman's log files are world readable References: <20140606200402.4310.81326.malonedeb@soybean.canonical.com> Message-ID: <20140606203806.26070.46063.launchpad@wampee.canonical.com> ** Changed in: mailman Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1327404 Title: Mailman's log files are world readable To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1327404/+subscriptions From pasi at shimmerproject.org Mon Jun 9 10:30:32 2014 From: pasi at shimmerproject.org (Pasi Lallinaho) Date: Mon, 09 Jun 2014 08:30:32 -0000 Subject: [Bug 558227] Re: Add label tag around checkbox+label References: <20100408090813.1687.57341.launchpad@loganberry.canonical.com> Message-ID: <20140609083034.26461.87346.launchpad@wampee.canonical.com> *** This bug is a duplicate of bug 266391 *** https://bugs.launchpad.net/bugs/266391 ** This bug has been marked a duplicate of bug 266391 difficult to use radio and check boxes in admin interface -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/558227 Title: Add label tag around checkbox+label To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/558227/+subscriptions From pasi at shimmerproject.org Mon Jun 9 10:30:49 2014 From: pasi at shimmerproject.org (Pasi Lallinaho) Date: Mon, 09 Jun 2014 08:30:49 -0000 Subject: [Bug 558028] Re: add