On Saturday, October 6, 2001, at 03:55 AM, jgo wrote:
> > Now, I'm looking at security issues WRT configuration. > "You want to be very sure that the user id under > which your CGI scripts run is *not* in the 'mailman' > group..." > But I don't see any words indicating how the username > which executes the CGI scripts is controlled (other > than merely controlling what users have access to the > CGI directories in write mode). Do I need to set up > one or more usernames for that purpose, or will > nobody serve, or?? The CGI scripts are run as the user the webserver runs as. Which on MacOS X is user www (group www). See /private/etc/httpd/httpd.conf. So you want to configure Mailman with --with-cgi-gid=www. joe ------------------------------------------------------ Mailman-Users maillist - [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users
