[Pkg-mlmmj-devel] Bug#617248: mlmmj: Postfix information in README.Debian needs to say something about owner of mailing list files

Reuben Thomas rrt at sc3d.org
Mon Mar 7 14:20:34 UTC 2011


Package: mlmmj
Version: 1.2.17-1
Severity: normal


As written, the information in README.Debian doesn't allow one to set
up a working mailing list with Postfix, because when a message is
received, postfix runs the delivery command, as given in /etc/aliases,
as user "nobody", but by default the mailing list (assuming it was
created by root) is owned by root.

The simplest fix (which I found confirmed here:

http://eclug.homelinux.org/content/view/265/59/

) is to chown -R nobody:nogroup /var/spool/mlmmj/list, but this
doesn't seem very sensible ("nobody" shouldn't really own files);
however, using "nobody" to run command in /etc/aliases is the default
setting for postfix, and it's sensible.

mlmmj's own README.postfix suggests using a different setup method to
get around this problem, namely, using an mlmmj user and a transport
map.

Would it not be better to suggest this method in README.Debian? It's a
little more complex, but a lot more secure than suddenly giving the
"nobody" user access to a mailing list.

-- System Information:
Debian Release: squeeze/sid
  APT prefers lucid-updates
  APT policy: (500, 'lucid-updates'), (500, 'lucid-security'), (500, 'lucid-backports'), (500, 'lucid')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-28-generic (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages mlmmj depends on:
ii  debconf [debconf-2.0]  1.5.28ubuntu4     Debian configuration management sy
ii  libc6                  2.11.1-0ubuntu7.8 Embedded GNU C Library: Shared lib
ii  postfix [mail-transpor 2.7.0-1           High-performance mail transport ag

mlmmj recommends no packages.

Versions of packages mlmmj suggests:
pn  mlmmj-php-web                 <none>     (no description available)
pn  mlmmj-php-web-admin           <none>     (no description available)

-- debconf information excluded





More information about the Pkg-mlmmj-devel mailing list