[Mailman-Developers] Mailman 2.1.26 Security release Feb 4, 2018

[Mark Sapiro]

On 02/07/2018 04:01 AM, Sebastian Hagedorn wrote:
> Hi,
> 
> FWIW, I just installed 2.1.26 on a test system, and that command does
> not work for me:
> 
> $ mailman-config
>  File "/usr/lib/mailman/bin/mailman-config", line 34
>    print "mail_group:      %s" % ""mail", "postfix", "mailman",
> "nobody", "daemon""
>                                       ^
> SyntaxError: invalid syntax
> 
> Both that line and the following (for cgi_group) are double-quoted:
> 
> print "cgi_group:       %s" % ""apache""
...
> configure_opts: "--with-python=/usr/bin/python2.7 --without-permcheck" 



The issue is you're running configure --without-permcheck and you
haven't specified --with-mail-gid and --with-cgi-gid.

If you don't specify those, configure looks for an existing group for
mail-gid from "mailman other mail daemon" and for cgi-gid from "www
www-data nobody". If you don't specify --without-permcheck, configure
complains if it doesn't find a group in the system from the list, but if
you do specify --without-permcheck and configure doesn't find a group it
uses the whole "mailman other mail daemon" and/or "www www-data nobody"
string which causes the issue you're seeing in mailman-config.

There will also be group mismatch errors in the configured wrappers in
this case.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan