[Mailman-Users] Running mailman on a linux/grsecurity kernel

[Marc MERLIN]

Just in case this is useful for someone, I wrote the following quick doc
for using mailman on a linux/grsec kernel

----------------------------------------------------------------------------
Steps you need to take to run mailman on a linux grsecurity protected kernel

1) Install and run securelinux_fix.py -f

2) Grsecurity will not run binaries if the directory they're in is writable
   by a user other than root:
   panoramix:/var/local/mailman/mail# chown root.mailman .
   panoramix:/var/local/mailman/mail# chmod 755 .
   panoramix:/var/local/mailman/mail# chattr +i .

3) Apply the same fix to the CGIs
   panoramix:/var/local/mailman/cgi-bin# chown root.mailman .
   panoramix:/var/local/mailman/cgi-bin# chmod 755 .
   panoramix:/var/local/mailman/cgi-bin# chattr +i .

Marc <marcsoft at merlins.org> -- 2001/12/04
----------------------------------------------------------------------------
-- 
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
  
Home page: http://marc.merlins.org/   |   Finger marc_f at merlins.org for PGP key