[Mailman-Users] IOError: [Errno 13] Permission denied on config.pck in Fedora 30

[Robert Kudyba]

> On Jul 24, 2019, at 2:04 PM, Mark Sapiro <mark at msapiro.net> wrote:
> 
> On 7/24/19 10:44 AM, Robert Kudyba wrote:
>> 
>> 
>> So no when trying to log in to the ~/mailman/admindb/mailman admin page I get the below error, notice it’s a different permission problem:
>> 
>> Jul 24 13:41:51 2019 admin(5113): @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ 
>> admin(5113): [----- Mailman Version: 2.1.29 -----] 
>> admin(5113): [----- Traceback ------] 
>> admin(5113): Traceback (most recent call last):
>> admin(5113):   File "/usr/lib/mailman/scripts/driver", line 117, in run_main
>> admin(5113):     main()
>> admin(5113):   File "/usr/lib/mailman/Mailman/Cgi/admindb.py", line 345, in main
>> admin(5113):     mlist.Save()
>> admin(5113):   File "/usr/lib/mailman/Mailman/MailList.py", line 613, in Save
>> admin(5113):     self.__save(dict)
>> admin(5113):   File "/usr/lib/mailman/Mailman/MailList.py", line 590, in __save
>> admin(5113):     os.link(fname, fname_last)
>> admin(5113): OSError: [Errno 1] Operation not permitted
> 
> the admindb script is trying to save the list to do this, it first
> creates a temporary config.pck.tmp.hhh.ppp file there hhh is the host
> name and ppp is the PID of the process and writes the data to that. It
> then unlinks (removes) config.pck.last, links config.pck to
> config.pck.last and finally renames config.pck.tmp.hhh.ppp to config.pck.
> 
> In your case it is the linking of config.pck to config.pck.last that is
> failing.
> 
> All these files should be group 'mailman' and group writable and the
> process should be running with effective group 'mailman’.

By “these files” do you mean in /usr/lib/mailman? Those definitely did not have group write permissions. Do these files also need suid?

> Did you see my reply about the file system needing to be mounted suid?

Yes I did an responded in line with the permissions of the sub-directories and files:
ls -l  /usr/lib/mailman/cgi-bin/
total 264
-rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 admin
-rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 admindb
-rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 confirm
-rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 create
-rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 edithtml
-rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 listinfo
-rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 options
-rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 private
-rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 rmlist
-rwxr-sr-x 1 mailman mailman 23048 Feb 12 06:54 roster
-rwxr-sr-x 1 mailman mailman 23056 Feb 12 06:54 subscribe

ls -l  /usr/lib/mailman/mail
total 24
-rwxr-sr-x 1 mailman mailman 23176 Feb 12 06:54 mailman

ls -l  /usr/lib/mailman/mail/
total 24
-rwxr-sr-x 1 mailman mailman 23176 Feb 12 06:54 mailman

ls -l  /usr/lib/mailman/mail/mailman 
-rwxr-sr-x 1 mailman mailman 23176 Feb 12 06:54 /usr/lib/mailman/mail/mailman