[Mailman-Users] [bug in mm2.1] mailmanctl doesn't set groups.

[Jonas Meurer]

hello,
the mailmanctl script doesn't set groups.
so when i run mailmanctl as root, i become list:list but still have the
groups that root has. that's a grave security bug.

a possible (and working) patch is attached.

bye
 mejo
 
ps: since the bug-reporting system at sourceforge doesn't work atm, i
report the bug to the two mailman lists.
 
-- 
Efficiency and progess is ours one more
Now that we have the Neutron bomb
It's nice and quick and clean and gets things done
Kill kill kill kill kill the poor tonight
-------------- next part --------------
287a288
>     groups = [gid] +  [x[2] for x in grp.getgrall() if mm_cfg.MAILMAN_USER in x[3]]
289a291
>         os.setgroups(groups)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.python.org/pipermail/mailman-users/attachments/20030701/3bf6ba1c/attachment.pgp