[Mailman-Users] Determine listserv that a member belongs to

Mark Sapiro mark at msapiro.net
Mon Jun 16 23:00:38 CEST 2014

On 06/16/2014 01:45 PM, Lindsay Haisley wrote:
> If you have shell access on a Mailman host you can pretty much do as you
> wish, including circumventing a lot of Mailman's privacy walls, all
> without having system root access.  This is both good and bad,
> obviously, and is mostly an argument for being cautious about who has
> terminal access on a server running Mailman.

You still need sufficient access. E.g., config.pck files are not world
readable, at least in a normal install, so you need to be root or in
Mailman's group to access list information. Also, we tell you how to
protect archives/private/ from non-root/mailman access by local users.

Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

More information about the Mailman-Users mailing list