[Mailman-Users] Trying again from the start -- Re: Help inunderstandingMailmansetup

[Robert Moskowitz]

On 12/06/2010 07:30 PM, Mark Sapiro wrote:
> Robert Moskowitz wrote:
>    
>> Through trail and error, user apache needed access.
>>
>> Should user apache be added to the mailman group, as the files seem to
>> have root:mailman or mailman:mailman as their owners?
>>      
>
> The way this is supposed to work is all the files in
> /usr/lib/mailman/cgi-bin/ are compiled wrappers that are supposed to
> be group 'mailman' and SETGID. Thus, when they are invoked through
> Apache's ScriptAlias, they run with effective group 'mailman'. See the
> FAQ at<http://wiki.list.org/x/tYA9>  for more detail.
>
> You should not add user 'apache' to the 'mailman' group. This could
> potentially give public access to things which aren't public.

Ah,  OK got it....

Well hopefully one more time to get it right the first time...

:)