[Pkg-mailman-hackers] Bug#360905: web-frontend: mailman-cgis can not be used with apache-suexec

[Fionn Behrens]

On Mi, 2006-04-05 at 14:51 +0100, Roger Lynn wrote:
> On 05/04/2006 13:43, Fionn Behrens wrote:
> > When installing mailman mit apache and suexec, mailman can not be used:
> > The Mailman CGIs insist on being group "www-data", otherwise they wont
> > execute. Unfortunately though, on debian the group "www-data" has gid 33
> > and suexec forbids execution of CGIs with gid < 50.
> 
> Actually the Debian Mailman cgi wrapper only checks that the group is
> www-data if the gid is >= 100 or != 65534. See
> http://bugs.debian.org/303342#msg44 for an explanation. Executing with a gid
> of 50-99 or 65534 should work (although I haven't tested this and I'm not
> familiar with suexec).

If that is the case, a clearly visible warning in README.Debian or even
at installation (if suexec is detected) should be issued to the user,
otherwise it can become pretty confusing.

JFYI, I ended up patching the username in to all CGIs with a hex editor
(fortunately it was a shorter string than "www-data"...).