[Mailman-Users] Trying again from the start -- Re: Help inunderstandingMailmansetup

[Mark Sapiro]

Robert Moskowitz wrote:
>
>Through trail and error, user apache needed access.
>
>Should user apache be added to the mailman group, as the files seem to 
>have root:mailman or mailman:mailman as their owners?


The way this is supposed to work is all the files in
/usr/lib/mailman/cgi-bin/ are compiled wrappers that are supposed to
be group 'mailman' and SETGID. Thus, when they are invoked through
Apache's ScriptAlias, they run with effective group 'mailman'. See the
FAQ at <http://wiki.list.org/x/tYA9> for more detail.

You should not add user 'apache' to the 'mailman' group. This could
potentially give public access to things which aren't public.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan