Bug 198123

Summary: should not try to write to /usr/lib/mailman/Mailman when mm_cfg.py changes
Product: [Fedora] Fedora Reporter: Russell Coker <russell>
Component: mailmanAssignee: Harald Hoyer <harald>
Status: CLOSED WORKSFORME QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 5   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-09-29 12:37:58 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Russell Coker 2006-07-09 23:31:18 UTC
When mm_cfg.py is changed the Python scripts try to compile it to mm_cfg.pyc 
which requires write access to /usr/lib/mailman.  Such access is not 
appropriate and is prevented by SE Linux policy.

A better solution would be to have the file mm_cfg.py installed in a directory 
of it's own so that write access could be granted to it without granting write 
access to other files.

The FHS says: "/usr/lib includes object files, libraries, and internal 
binaries that are not intended to be executed directly by users or shell 
scripts", so it seems that config files should not be there anyway.

Comment 1 Harald Hoyer 2006-09-29 12:37:58 UTC
does /etc/mailman/ not work?

$ ls /etc/mailman/
adm.pw  mm_cfg.py  mm_cfg.pyc  mm_cfg.pyo  sitelist.cfg