[Mailman-Users] Is there a security hole in Mailman?

[Mark Sapiro]

Jim Popovitch wrote:
>
>Side question:  If the webserver is running as a user/group that can't 
>directly access the Mailman installation, how can Mailman web interfaces 
>work?  Perhaps you mean something else by the above?


The web interface accesses Mailman through setgid wrappers. See
<http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq06.016.htp>.

-- 
Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan