[Mailman-Users] looking for: find_member.cgi

[Jim Popovitch]

Hi Jon,

Thanks for the suggestion.  The hitch here is that find_memeber (called from
within find_member.cgi) needs read access to $MAILMAN/lists/*/config.db, and
currently those files are installed chmod 660.  Any comments on the security
impact of chmod'ing these to 664?

-Jim P.

> -----Original Message-----
> From: Jon Carnes [mailto:jonc at nc.rr.com]
> Sent: Sunday, May 04, 2003 1:46 PM
> To: Jim Popovitch
> Cc: mailman-users at python.org
> Subject: Re: [Mailman-Users] looking for: find_member.cgi
>
>
> On Sun, 2003-05-04 at 03:04, Jim Popovitch wrote:
> > Hi,
> >
> > I hosts several MM lists for others and I want to provide a way for them to
> > search for a member within their lists.  I have tried wrapping
> find_member with
> > a cgi script but this will not work because of permission problems.
>  Has anyone
> > ever done this successfully and securely?
> >
> > -Jim P.
>
> Start out by placing your cgi in the ~mailman/cgi-bin/.. directory. Make
> it group owned by "mailman" and then set the GID bit (so that your cgi
> looks like the others).
>
> Hopefully that will get your cgi running with the proper rights
> (gid=mailman).
>