I'm marking this 'invalid' because it doesn't apply to GNU Mailman. I
think it applies to Debian's package and therefore probably Ubuntu's
package, and further, I think the issue addressed here was fixed in
Debian's package per <http://patch-
tracker.debian.org/patch/series/view/mailman/1:2.1.15-1/21_newlist_help.patch>.

However, as I recently wrote to a Debian developer,

(this) will set the effective gid to Mailman's gid if the person running
bin/newlist (the user) is not a member of Mailman's group. Will this
even work if the user is not root? If the user is root, it shouldn't be
necessary, and if the user is not root and not in Mailman's group, it
shouldn't be done since if it works, it would allow any user with shell
access to the server to create lists.

** Changed in: mailman
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/266363

Title:
  Newlist and groups

To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/266363/+subscriptions
_______________________________________________
Mailman-coders mailing list
[email protected]
http://mail.python.org/mailman/listinfo/mailman-coders

Reply via email to