[Mailman-Users] Is there a security hole in Mailman?

Mark Sapiro msapiro at value.net
Mon Feb 13 22:01:33 CET 2006

Jim Popovitch wrote:
>Side question:  If the webserver is running as a user/group that can't 
>directly access the Mailman installation, how can Mailman web interfaces 
>work?  Perhaps you mean something else by the above?

The web interface accesses Mailman through setgid wrappers. See

Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

More information about the Mailman-Users mailing list