From owner-freebsd-ports@FreeBSD.ORG Sat Apr 21 14:33:21 2007 Return-Path: X-Original-To: ports@freebsd.org Delivered-To: freebsd-ports@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 82DDA16A400 for ; Sat, 21 Apr 2007 14:33:21 +0000 (UTC) (envelope-from jeffrey@goldmark.org) Received: from out4.smtp.messagingengine.com (out4.smtp.messagingengine.com [66.111.4.28]) by mx1.freebsd.org (Postfix) with ESMTP id 44B0713C459 for ; Sat, 21 Apr 2007 14:33:21 +0000 (UTC) (envelope-from jeffrey@goldmark.org) Received: from compute1.internal (compute1.internal [10.202.2.41]) by out1.messagingengine.com (Postfix) with ESMTP id 3F5F72176CC; Sat, 21 Apr 2007 10:33:24 -0400 (EDT) Received: from heartbeat2.messagingengine.com ([10.202.2.161]) by compute1.internal (MEProxy); Sat, 21 Apr 2007 10:33:21 -0400 X-Sasl-enc: 29rq7UgZFiHbuUIvYvfHRUmo+BOPQvTx5EQwhQ8IjUvu 1177166001 Received: from [10.1.10.132] (n114.ewd.goldmark.org [72.64.118.114]) by mail.messagingengine.com (Postfix) with ESMTP id 11F4013D97; Sat, 21 Apr 2007 10:33:21 -0400 (EDT) In-Reply-To: <05E49D98F442250F5D84D64D@paul-schmehls-powerbook59.local> References: <200704200842.48793.david@vizion2000.net> <94592079D5FE1208BC6F7D03@utd59514.utdallas.edu> <241A5B7DB4C2BB1A9FE54C99@paul-schmehls-powerbook59.local> <2D8F0EEC-CA1A-403E-8799-8E6D27C11475@goldmark.org> <05E49D98F442250F5D84D64D@paul-schmehls-powerbook59.local> Mime-Version: 1.0 (Apple Message framework v752.2) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <300D5227-AF5E-4792-8518-7BAAFBB71392@goldmark.org> Content-Transfer-Encoding: 7bit From: Jeffrey Goldberg Date: Sat, 21 Apr 2007 09:33:18 -0500 To: Paul Schmehl X-Mailer: Apple Mail (2.752.2) Cc: ports@freebsd.org, Jean Milanez Melo Subject: Re: Mailman GID problem X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Apr 2007 14:33:21 -0000 On Apr 21, 2007, at 12:46 AM, Paul Schmehl wrote: > Clearly that last part is wrong. > bash-2.05b# ls -lsa /usr/local/mailman/data/aliases* > 6 -rw-r--r-- 1 root mailman 4383 Oct 14 2005 /usr/local/ > mailman/data/aliases > 4 -rw-r----- 1 mailman mailman 3984 Sep 8 2005 /usr/local/ > mailman/data/aliases.bak > 48 -rw-r----- 1 mailman mailman 49152 May 5 2006 /usr/local/ > mailman/data/aliases.db > > I can't imagine why both files need to be group writeable. The > only time the file is written to (AFAIK) is when you add a mailing > list, and mailman owns the file and has write access. The only > time the db is written to is when you run postalias, and you should > always run that as root, either directly or through sudo. Mailman will call postalias itself when you create a new list. At least if it is properly configured for postfix. In the install from ports with the postfix option I have POSTFIX_ALIAS_CMD = '/usr/local/sbin/postalias' in Defaults.py, though I haven't spotted where that is actually called. >> However it is the owner of the file containing the pipe alias that >> matters to postfix local deliveries. See local(8). >> > Why? Postfix only needs read access to know what aliases it needs > to deliver to. I don't see anything in local(8) that says postfix > requires ownership of the alias file or the aliases db. Look in the DELIVERY RIGHTS section of the man page DELIVERY RIGHTS Deliveries to external files and external commands are made with the rights of the receiving user on whose behalf the delivery is made. In the absence of a user context, the local(8) daemon uses the owner rights of the :include: file or alias database. When those files are owned by the superuser, delivery is made with the rights specified with the default_privs configuration parameter. I discussed that in some earlier post when trying to explain why I thought the .db files should be owned by root or nobody (the value of default_privs). > Now that I've looked at the Makefile, you are correct. Well, with so many guesses, I had to be close to right on one of them. > For Postfix it selects nobody which is incorrect. My guess is that Jean reading the mailman documentation looked for what Postfix's equivalent of "mailnull" was and found that it was "nobody". > It should be selecting mailman. However, if you build the port like > this: make -DWITH-MAIL-GID=mailman (or use pkgtools.conf as I do), > you override the options and the port compiles correctly. I'm far from grokking the ports and pkg systems. I guess that the pkg install gives you a sort of default mailman which isn't compiled for any particularly MTA, while the port gave us the opportunity to configure for POSTFIX and one bit of that configuration is wrong. Thanks everyone for putting up with my somewhat long-winded learning experience. Cheers, -j -- Jeffrey Goldberg http://www.goldmark.org/jeff/