[Mailman-Users] Re: install on OS X

[Joe Keenan]

On Saturday, October 6, 2001, at 03:55  AM, jgo wrote:

>
> Now, I'm looking at security issues WRT configuration.
> "You want to be very sure that the user id under
>  which your CGI scripts run is *not* in the 'mailman'
>  group..."
> But I don't see any words indicating how the username
> which executes the CGI scripts is controlled (other
> than merely controlling what users have access to the
> CGI directories in write mode).  Do I need to set up
> one or more usernames for that purpose, or will
> nobody serve, or??

The CGI scripts are run as the user the webserver runs as.  Which on MacOS 
X is user www (group www).  See /private/etc/httpd/httpd.conf.

So you want to configure Mailman with --with-cgi-gid=www.

joe