[Mailman-Users] Re: CPU %-usage surge associated with list archives

[Bruce Johnson]

For general info, here is CentOS’s SELinux HowTo:

https://wiki.centos.org/HowTos/SELinux

Another good introduction:

https://www.digitalocean.com/community/tutorial_series/an-introduction-to-selinux-on-centos-7

Or you can just turn it off and trust the firewall if this is the only thing 
the server does...

On Nov 15, 2020, at 10:43 PM, Bill Cole 
mailto:mailmanu-20190...@billmail.scconsult.com>>
 wrote:

On 15 Nov 2020, at 22:18, Stephen J. Turnbull wrote:

I don't
see why access to archives would cause a security issue,

FWIW:

1. SELinux doesn't know about specific security issues, it assumes that nothing 
is safe unless explicitly allowed.

--
Bruce Johnson
University of Arizona
College of Pharmacy
Information Technology Group

Institutions do not have opinions, merely customs

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: CPU %-usage surge associated with list archives

[Mark Sapiro]

On 11/15/20 9:43 PM, Bill Cole wrote:
> 
> 2. On RHEL7 and its derivatives, the default SELinux policy includes a
> module for mailman's executable and data files which *in my experience*
> just works without modification when mailman is installed from an
> official RPM. It's even documented, if the policy docs are installed:


And several years ago (in the 2.1.5 timeframe), RedHat modified their
Mailman package to be FHS compliant for the specific purpose of avoiding
SELinux security violations.

See  and
.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/