The mailman command should not run as root.
There are two issues here. Some sites intentionally want to run Mailman as root
. This is a bad idea for security reasons. In other cases, site admins sometimes inadvertently run mailman start
and/or other mailman
commands as root
. This can result in various files being created by root
and not being accessible when Mailman is run as the non-root Mailman user.
I propose making the mailman
command refuse to run as root
and instead issue an appropriate error message.