[Mailman-Users] Group write permissions necessary?

[Marc MERLIN]

On Fri, Apr 20, 2001 at 08:58:05AM -0500, Pug Bainter wrote:
> 
> Good Morning,
> 
>   With the group write permissions on the directory, it's a little less
>   secure and I would like to get rid of that. Are there any issues with
>   getting rid of it?

Yes, as soon as  root or some other privileged user  runs a mailman command,
config.db will  be owned by  a user other than  mailman, and your  list will
stop working.

While it is  designed to fix a  different issue, if you  use the securelinux
fix in contrib (see  your source tree), it should allow  you to remove group
writeable permissions on dirs.

Marc
-- 
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
  
Home page: http://marc.merlins.org/   |   Finger marc_f at merlins.org for PGP key