[Mailman-Users] Determine listserv that a member belongs to

[Mark Sapiro]

On 06/16/2014 01:45 PM, Lindsay Haisley wrote:
> 
> If you have shell access on a Mailman host you can pretty much do as you
> wish, including circumventing a lot of Mailman's privacy walls, all
> without having system root access.  This is both good and bad,
> obviously, and is mostly an argument for being cautious about who has
> terminal access on a server running Mailman.


You still need sufficient access. E.g., config.pck files are not world
readable, at least in a normal install, so you need to be root or in
Mailman's group to access list information. Also, we tell you how to
protect archives/private/ from non-root/mailman access by local users.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan