[Mailman-Users] bug

[Mark Sapiro]

On 10/27/19 9:24 PM, Stephen J. Turnbull wrote:
> 
> It appears this process is running as www-data.  Does
> /var/lib/mailman/locks exist?  Is it a directory?  Is it readable and
> writable as a directory by www-data or www-data's group?  Is it on a
> local disk, or some kind of network file system?

Actually, the owner of /var/lib/mailman/locks doesn't matter. The key
requirement is its group is Mailman's group ('mailman', 'list', whatever
Mailman runs as)

>  > SCRIPT_NAME: /virtualmin-mailman/unauthenticated/admindb.cgi
> 
> This is not provided by Mailman, I suspect, unless it's a link to a
> Mailman script.  What does it do?  Is it just a call to
> /var/lib/mailman/scripts/driver?

This is probably the standard CGI wrapper for admindb. It too should be
Mailman's group and SETGID.

Does the admin URL have the same error?

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan