[Mailman-Users] remove_members by other users

J C Lawrence claw at 2wire.com
Mon Oct 1 23:10:09 CEST 2001


On Sun, 30 Sep 2001 19:01:30 +0200 
Ben-Nes Michael <miki at canaan.co.il> wrote:

> I need to be able executing remove_members by other users ( like
> nobody )

Ouch.  Please be aware of the implicit security hole you're opening
here.

To do this you'll need to write an SUID wrapper which changes its
UID to your Mailman user and then runs remove_members under that
context.  

-- 
J C Lawrence
---------(*)                Satan, oscillate my metallic sonatas.
claw at kanga.nu               He lived as a devil, eh?
http://www.kanga.nu/~claw/  Evil is a name of a foeman, as I live.




More information about the Mailman-Users mailing list