Subject: pkg/30133: majordomo install sets ~majordom/list with group write enabled + unlisted conflict
To: None <pkg-manager@netbsd.org, gnats-admin@netbsd.org,>
From: None <waddell@caravan.com>
List: pkgsrc-bugs
Date: 05/04/2005 20:13:00
>Number:         30133
>Category:       pkg
>Synopsis:       majordomo install sets ~majordom/list with group write enabled + unlisted conflict
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Wed May 04 20:13:00 +0000 2005
>Originator:     Harry Waddell
>Release:        netbsd 2.0.2 i-386
>Organization:
Caravan Publishing
>Environment:
NetBSD www.pbspro.com 2.0.2_STABLE NetBSD 2.0.2_STABLE (CARAVANWKS) #2: Fri Apr 15 21:04:55 PDT 2005  waddell@morocco:/usr/obj/sys/arch/i386/compile.i386/CARAVANWKS i386

>Description:
reinstalling the majordomo package changes the ~/lists dir to have 
group write set, which when used with sendmail which sendmail and cause problems when trying to finally deliver to a list, e.g.:

  ----- The following addresses had permanent fatal errors -----
:include:/home/majordom/lists/agt-staff
    (expanded from: <agt-staff-list@mail.pbspro.com>)

   ----- Transcript of session follows -----
550 5.2.4 :include:/home/majordom/lists/agt-staff... Cannot open /home/majordom/lists/agt-staff: Group writable directory
Message delivered to mailing list <agt-staff-list@mail.pbspro.com>

There may be some reason why the permissions are so permissive, but if there is not, 755 seems like a better value.

Also, mail/majordomo conflicts with net/bounce since they both install
/usr/pkg/bin/bounce and /usr/pkg/man/man1/bounce.1
>How-To-Repeat:
reinstall majordomo package when using sendmail.
>Fix:
change INSTALL to set more restrictive directory perms, or add a target to Makefile postinstall section.