mailman.git - The GNU Mailing List manager.

	Commit message (Collapse)	Author	Files	Lines
1999-07-09	main(): Slightly different message for confirmation.	bwarsaw	1	-1/+1

1999-07-09	SetSiteAdminPassword(): Open data/adm.pw with Utils.open_ex() so we	bwarsaw	1	-5/+3
	can exactly specify the permissions on the file. We don't need to save the umask since open_ex() does this. The permissions must be exactly 0640, which restricts as much as possible. Group must be able to read the file or site-password override in the Web interface will not work. Fixes PR#67
1999-07-09	checkadminpw(): Check the permissions on data/adm.pw, which now must	bwarsaw	1	-9/+20
	be 0640. We'd like to restrict the permissions as much as possible, but group mailman must be able to read the file, or site-password override in the Web interfaces won't work.
1999-07-07	Use stat's symbolic names for list indices.	bwarsaw	1	-2/+3

1999-07-07	Move the locking stuff from here to cron/run_queue. This way, I can	bwarsaw	1	-16/+4
	wrap the body of the code in a try/finally so the lock is definitely released should something bad happen.
1999-07-07	Move the locking stuff to here from OutgoingQueue.processQueue().	bwarsaw	1	-1/+16
	This way, I can wrap the body of the code in a try/finally so the lock is definitely released should something bad happen.
1999-07-06	check_perms: No need to generate this file. MAILMAN_GRPNAME must	bwarsaw	3	-5/+6
	always be `mailman' (from which we can automatically get the gid), and PREFIX is available in mm_cfg. .cvsignore, Makefile.in: undo administrivia
1999-07-06	I realized we don't need to generate check_perms.	bwarsaw	2	-5/+5

1999-07-06	check_perms.in: A file for a simple permission and group ownership	bwarsaw	3	-3/+159
	check over the Mailman installation. Not sure I got everything, but its a start. .cvsignore, Makefile.in: administrivia
1999-07-06	Generate bin/check_perms from .in file	bwarsaw	2	-5/+5

1999-07-05	NEWS in 1.0rc3	hmeland	1	-0/+20

1999-07-05	Added a quick discussion of the "owner-alias" sendmail feature/problem	hmeland	1	-0/+14
	under the member_posting_only section.
1999-07-05	.Post(): Try working around the "owner-alias" sendmail feature by	hmeland	1	-1/+7
	using GetSender iff use of GetEnvelopeSender was attempted but returned an address beginning with '%s-admin' % self._internal_name
1999-07-03	GetUserOption(), SetUserOption(): The invariant is that the keys for	bwarsaw	1	-0/+2
	list.user_option must be lowercase addresses (i.e. canonicalized addrs). The DATA_FILE_VERSION bump will fix existing lists and these two functions always lowercase the user address before checking it. Fixes PR#74
1999-07-03	Update(): Call CanonicalizeUserOptions()	bwarsaw	1	-0/+15
	CanonicalizeUserOptions(): New function that merges all mixed-case-keyed user_options and stores them using lower case keys.
1999-07-03	VERSION: to 1.0rc2+ (soon to be rc3?)	bwarsaw	1	-2/+2
	DATA_FILE_VERSION: Bump to 15 to fix PR#74 (see other checkins)
1999-07-03	Catch MMBadEmailError and print a sensible message (PR#59)	bwarsaw	1	-3/+8

1999-07-03	Use autoconf results for true (PR#65)	bwarsaw	1	-1/+2

1999-07-03	Added autoconf test for true (PR#65)	bwarsaw	2	-106/+91

1999-07-02	Don't check for VPRINTF since we don't use it anywhere in the C code.	bwarsaw	2	-72/+23
	We may eventually need to check for VSNPRINTF.
1999-07-02	fatal(): Use vsnprintf() to avoid potential buffer overflow	bwarsaw	1	-2/+4
	vulnerability (PR#72)
1999-07-01	MailList.Save(): Rewrite to be more robust in maintaining a valid	bwarsaw	1	-13/+28
	config.db file in the face of IOErrors during the marshal write. This is critical code so we have to make sure we get it right, but I've been running it on python.org for about a day and have seen no problems under normal conditions. I've tested under failure mode too, but not under real world conditions.
1999-07-01	DumbBTree.clear(): New method to short-circuit clearing the btree.	bwarsaw	1	-3/+8
	This isn't part of the bsddb.btree interface assumed by Pipermail, but it's only used in one place and /dramatically/ improves Mailman's performance. HyperDatabase.clearIndex(): Use DumbBTree.clear(). These changes may not fix all the performance problems with Mailman, but certainly nails the most serious problem I've been experiencing.
1999-07-01	Fixed typo in SendMailToNewsGroup().	hmeland	1	-1/+1

1999-07-01	ProcessConfirmCmd(): Confirmation of an subscription for an address	hmeland	1	-1/+4
	can bomb out with MMAlreadyAMember if the address has already been subscribed by some other mechanism after the pending confirmation was registered. Catch this and reply politely.
1999-07-01	Fixed a minor grammar error.	hmeland	1	-1/+1

1999-07-01	Archiver.ArchiveMail(): As this method always is called with one	hmeland	1	-1/+5
	single message, we must quote any lines beginning with "From " -- the message will be interpreted by the general HyperArch.HyperArchive.processUnixMailbox() as a (possibly multi-message) mbox file on it's way into the archive.
1999-07-01	DeliverToUser(): I believe the forking done in here is no longer	hmeland	1	-20/+34
	needed. For now, however (trying to move towards 1.0), I've merely reduced the amount of work done in the child, and wrapped it in a try: clause for catching fork() failures.
1999-07-01	processQueue(): Catch and log problems with corrupt/inaccessible queue	hmeland	1	-4/+26
	files. This fixes a problem where one old, invalid queue file would always cause the queue runner to abort before the newer, possibly valid queue files were processed.
1999-07-01	IncomingMessage.GetSender(): Don't assume addresses taken from headers	hmeland	1	-4/+8
	are valid.
1999-07-01	The "password" mail command can now also be used for having one's	hmeland	1	-2/+14
	member password mailed back -- if given with no arguments.
1999-07-01	Fixed problem with MIME bounces not containing any MIME boundaries at	hmeland	1	-1/+6
	all (these used to raise an IndexError).
1999-07-01	Use "mailman-<version>" instead of "<mailman-src-dir>" when referring	hmeland	1	-5/+8
	to the directory Mailman has been unpacked into, to avoid any confusion regarding the "src" directory inside "mailman-<version>". Tried to clarify the solution to smrsh-induced problems.
1999-07-01	Added a section named "How secure are the authentication mechanisms	hmeland	1	-0/+44
	used in Mailman's web interface?".
1999-06-15	re.match() was being used when we wanted re.search() for finding	hmeland	1	-2/+2
	already inserted subject prefixes :(
1999-06-14	Bumping revnum to 1.0rc2	bwarsaw	3	-4/+7

1999-06-14	don't be so graphic :)	bwarsaw	1	-1/+1

1999-06-13	My annotation, v1 :)	hmeland	2	-1/+19

1999-06-13	TrySMTPDelivery(): Be smarter about handling the various exceptions	hmeland	1	-3/+45
	smtplib.sendmail() can raise.
1999-06-13	SecurityManager:	hmeland	4	-166/+171
	* New method WebAuthenticate(). Takes up to three keyword arguments: user-address, password and cookie-suffix. If password is supplied (and authenticates OK), issue a cookie -- otherwise try to do authentication based on cookies. * MakeCookie(): Changed to actually return a finished Cookie object. Takes one (non-optional) argument; the created cookie's name. Fixed bug in setting of cookie's path. * CheckCookie(): Now takes cookie's name as single argument, and can raise various MMAuthenticationErrors if that cookie doesn't authenticate OK. admin.py: Do explicit re-authentication when changing list admin password. admin.py, admindb.py and private.py: Removed isAuthenticated() function -- use MailList.WebAuthenticate() instead. This removed the need to import Cookie, so now we don't.
1999-06-13	Undo, previous checkin was a mistake (I'm still only beginning to	hmeland	1	-11/+8
	experiment with the addaliases stuff).
1999-06-13	Create(): Do ValidateEmail(admin) before trying to actually create	hmeland	2	-10/+13
	anything, to disallow bin/newlist creating lists with bogus admin addresses.
1999-06-13	AddToResponse(): Added new optional arg `prefix'. Changed truncation	hmeland	1	-87/+95
	to be a per-line operation, done after addition of prefix. AddError(): Use AddToResponse with the new `prefix' argument to make sure the prefix is added to all the lines of the error message. Added info on the `help' mail command to the response indicating processing problems. Quite a lot of buglet fixes and general cleanup.
1999-06-13	Created MMAuthenticationError exception class hierarchy, into which	hmeland	1	-2/+9
	MMBadPasswordError and MMPasswordsMustMatch have been moved.
1999-06-13	Fixed ordering of MIME boundaries.	hmeland	1	-4/+5

1999-06-13	Some more TODOs -- nothing critical.	hmeland	1	-2/+5

1999-06-13	Use new MailList.ApprovedAddMembers() to speed up addition.	hmeland	1	-25/+21

1999-06-13	Postfix's alias builder is commonly called `postalias', not `mkalias'.	hmeland	1	-2/+2

1999-06-11	More changes to make syslog() work on OSes where it isn't part of the	hmeland	3	-65/+64
	standard libraries. This fix has been verified to work on SCO OpenServer 5, which was the OS for which this change was originally needed. The previous attempt at a fix, stolen from GNU sh-utils, proved insufficient.
1999-06-11	Changes to fix the CGI cookie security flaw reported by John Morton.	hmeland	4	-14/+38
	SecurityManager: New functions MakeCookie() and CheckCookie(). These functions work with cookies containing cookie creation and expire time, the client's IP number, and a checksum hash of these values as well as a secret (the lists (encrypted) admin password). admin.py, admindb.py and private.py: isAuthenticated now uses these new cookie functions.