[Mailman-Developers] Tracking down a permissions bug in attachments

[Robby Griffin]

On Sunday, Feb 8, 2004, at 16:33 US/Eastern, Robby Griffin wrote:

> On Friday, Jan 23, 2004, at 12:27 US/Eastern, Andrew Mellinger wrote:
>
>>   Now, it looks to me like Mailman is trying to set permissions on 
>> the newly
>> created directory to 02775.  I'm running on NetBSD which doesn't let 
>> anyone
>> but the superuser set the 2000 (setuid) bit.  I imagine this setting 
>> (02775)
>> was done for linux which overloads the setuid bit for as 'set group' 
>> on new
>> files.
>
> Something like that. This is bug #688751, and again I can confirm that 
> it occurs on NetBSD, so with every new release I've just commented out 
> three lines in Scrubber.py to avoid shunting messages with 
> attachments. I otherwise have no idea where to go with this. The 
> function in question works when run in a small test program as a 
> non-superuser...

Hmm. As best I can tell, this bug was fixed in 2.1.4 by the fix for bug 
#777444 ("mailmanctl doesn't setgroups when run as root"). With what 
version of Mailman did you encounter the problem?

	--Robby