[Mailman-Users] [bug in mm2.1] mailmanctl doesn't set groups.

Jonas Meurer jonas at freesources.org
Tue Jul 1 14:24:59 CEST 2003

the mailmanctl script doesn't set groups.
so when i run mailmanctl as root, i become list:list but still have the
groups that root has. that's a grave security bug.

a possible (and working) patch is attached.

ps: since the bug-reporting system at sourceforge doesn't work atm, i
report the bug to the two mailman lists.
Efficiency and progess is ours one more
Now that we have the Neutron bomb
It's nice and quick and clean and gets things done
Kill kill kill kill kill the poor tonight
-------------- next part --------------
>     groups = [gid] +  [x[2] for x in grp.getgrall() if mm_cfg.MAILMAN_USER in x[3]]
>         os.setgroups(groups)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.python.org/pipermail/mailman-users/attachments/20030701/3bf6ba1c/attachment.pgp 

More information about the Mailman-Users mailing list