Re: pkg/44068: Mailman's build process uses uid/gid of 'daemon' instead of 'mailman' and breaks package

["Filip Hajny" <filip%joyent.com@localhost>]

The following reply was made to PR pkg/44068; it has been noted by GNATS.

From: "Filip Hajny" <filip%joyent.com@localhost>
To: <gnats-bugs%NetBSD.org@localhost>
Cc: <pkg-manager%netbsd.org@localhost>,
        <gnats-admin%netbsd.org@localhost>,
        <pkgsrc-bugs%netbsd.org@localhost>,
        <andras%freeshell.de@localhost>
Subject: Re: pkg/44068: Mailman's build process uses uid/gid of 'daemon' 
instead of 'mailman' and breaks package
Date: Sat, 13 Nov 2010 10:58:51 +0100

 On 13.11.2010, at 2:20, OBATA Akio wrote:
 
 > On Sat, 13 Nov 2010 02:55:02 +0900, <andras%freeshell.de@localhost> wrote:
 >=20
 >> When I added
 >> MAILMAN_GROUP=3Dmailman
 >> MAILMAN_MAILGROUP=3Dmailman
 >> to /etc/mk.conf configuring worked like expected.
 >=20
 > I'm confused.
 > First, you said "MAILMAN_USER and MAILMAN_GROUP should be 'mailman', but =
 'daemon'",
 > Curently "MAILMAN_GROUP and MAILMAN_MAILGROUP should be 'mailman', but...=
 ".
 > I feel you just want to change MAILMAN_MAILGROUP to adjust your environme=
 nt.
 >=20
 >> There have been discussions in the past about setting the variables manu=
 ally.
 >> Anyhow: a user without (detailed) knowledge of the build process is like=
 ly to
 >> have a broken installation of mailman without manual setting of MAILMAN_=
 GROUP
 >> and MAILMAN_MAILGROUP in /etc/mk.conf.
 >> Shouldn't those variables be accessible from the option framework? Just a
 >> suggestion...
 >=20
 > If so, MAILMAN_MAILGROUP must be defined automatically from user's choice.
 > Do you know how to determine it automatically? by selection of MTA? using=
  OS? or something else?
 > i.e. you want to change MAILMAN_MAILGOUP to "mailman", where it came from?
 >=20
 
 I think this article sums it up:
 
 http://www.seaglass.com/postfix/mailman-gid.html
 
 In other words, with Postfix you either compile with MAILMAN_MAILGROUP=3Dno=
 body and then make sure the alias files are owned as root (so that Postfix =
 falls back to 'nobody' when executing the Mailman commands), or you compile=
  with an arbitrary GID (like 'mailman') and then keep the alias files owned=
  that way.=20
 
 I haven't tested what happens if you compile with 'mailman' and then try to=
  deploy on a system where the actual GID of 'mailman' is different from the=
  building system. My only world is that of Solaris, so 'nobody' is pretty c=
 onsistent there, and that's what I went with. No issues. Therefore the inst=
 ruction in mail/mailman/Makefile to use 'nobody' with Postfix is still a go=
 od one IMO.
 
 I think it needs to be cleared up that the zest of this PR has nothing to d=
 o with what user/group Mailman runs as (MAILMAN_USER, MAILMAN_GROUP), but w=
 hat group Mailman expects its binaries executed under by the MTA (i.e. MAIL=
 MAN_MAILGROUP). And this option is largely dependent on the particular MTA-=
 Mailman scenario.
 
 -F=