> OA> I was wondering if it is general majordomo problem on
> OA> how to implement security for the lists, so that only majordomo and
> OA> root can see and write to the lists and config files, and not anyone
> OA> with shell access on the unix computer you are operating the majordomo
> OA> lists on.
>
> The lists must be world-readable, so that the MTA can see them. If you
> don't like this, get one of the addons that eliminates this restriction
> (like TLB, do an archive search) or investigate Majordomo 2.0 alpha 1
> (http://www.hpc.uh.edu/majordomo), which also doesn't have this problem.
Can you add the uid that your MTA is running as to the group 'majordomo'?
If running sendmail, check your /etc/sendmail.cf for a DefaultUser
setting; that uid would then be added to the majordomo group. Then
make sure that everything is set 640.
Haven't thought about this too much; anyone think of any ramifications
to this?
Chris
Follow-Ups:
References:
|
|
