David Abrahams wrote: > >Pardon me, but isn't the GID with which to execute cgi scripts? Or >are you saying that mailman's CGI scripts need to execute with the >same GID as sendmail? If so, why?
Mailman's CGI scripts must run as group 'mailman' (or whatever is specified as the mailman group). Therefore, the wrappers are in the mailman group and SETGID. For security reasons (to prevent anyone from running a wrapper), the wrappers check to be sure the original group of the caller was the expected group. It's this expected GID that is set via the --with-cgi-gid option to configure, but as you note, you are installing a packaged Mailman (a FreeBSD port) so this really doesn't apply, at least if the packager set it up right. See <http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq06.016.htp> -- Mark Sapiro <[EMAIL PROTECTED]> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp