[Pkg-mlmmj-devel] Bug#617242: Bug#617242: mlmmj-make-ml does not ensure correct permissions for created files and directories

[Thomas Goirand]

On 11/06/2017 05:24 AM, Zhang Huangbin wrote:
> IMO, with Postfix integration, it should be a requirement to:
> 
> - create user/group “mlmmj:mlmmj”
> - create directory /var/spool/mlmmj, and owned by “mlmmj:mlmmj” with
>   permission 0700.
> - also setup a cron job to run command “mlmmj-maintd”[2] every 2 hours.

Clearly, that's a *specific* setup for your own use case. Let me
describe a very different setup.

With MLMMJ, it's possible to have use foo "own" the list, and have it
dropped in his home folder. In such a setup, the user could ssh to the
mlmmj folder, and customize, with ssh, the tunables of the list. The
"home" of the list would be somewhere in /home, owned by foo:foo. In
this type of setup, there's no need for a mlmmj:mlmmj user, and the user
could manually create the cron job with "crontab -e".

I don't think it's up to the Debian package to be opinionated. At most,
we could imagine a debconf question (with no by default) asking if we
want to do what you describe above. But I don't think we should do it
inconditionally.

If someone wants to provide a patch to do the debconf thing described
above, I would approve it. If it's a patch to do it every time, I would
reject it. I hope you understand why.

Cheers,

Thomas Goirand (zigo)