[Pkg-mailman-hackers] Bug#940858: Bug#940858: mailman3: `mailman create` as root creates directory with wrong owner

[Jonas Meurer]

Control: -1 wontfix

Hello,

Am 21.02.20 um 21:56 schrieb Pierre-Elliott Bécue:
>> When using the command `mailman create` as root, it creates a folder in
>> /var/lib/mailman3/lists/ with the root:root owner/group.
>>
>> This then causes the following error that makes the mailing list unusable:
>>
>> Sep 20 16:28:58 2019 (30951) Uncaught runner exception: [Errno 13] Permission denied: '/var/lib/mailman3/lists/ml.example.org/digest.mmdf'
>> FileNotFoundError: [Errno 2] No such file or directory: '/var/lib/mailman3/lists/ml.example.org/digest.mmdf'
>>
>>
>> I think this command, when run as root, should create the directory with the
>> appropriate owner/group (list:list), so that we don't have to chown the
>> directory manually thereafter. Or at least tell us that we need to run this
>> chown manually if mailman can't do it for some reason.
> 
> The main reason it's not obvious to act upon this is that it's Debian's
> choice to run mailman3 as list:list, hence the program can't really
> guess if being launched as root:root is normal or not. In my opinon one
> should know the potential impact of running a program as a specific
> user.
> 
> If you have an idea of a way to work upon that properly, I'm all ears.

Just to let you know: that's exactly what `/usr/bin/mailman-wrapper` is 
for. It takes care of invoking `/usr/bin/mailman` as user `list:list`.

Kind regards
  jonas

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-mailman-hackers/attachments/20201229/aedb03df/attachment.sig>