The mailing list for listmasters using Sympa

["Widerski, Betty" <address@concealed>]

Stephan provided the solution. For the specific setting I want – users cannot see if they themselves are subscribed to certain lists – I set Edit List Configuration-> Visibility of the list (visibility) to either the default scenario /usr/share/sympa/default/scenari/visibility.secret which only allows owners and listmasters to get that list reported via a which command, or Stephen’s “super-secret” scenario that only allows listmaster.

 

I was not talking about Privileges ->  Who can review subscribers (review)  - that I do have set to owners and listmasters only.

 

Thanks

Betty

 

Betty Widerski

Cloud & Server Engineering – HBS Information Technology

HARVARD  BUSINESS  SCHOOL     

Shad 108 N | address@concealed | T: 617.495.6642

 

 

 

From: Mathieu Roquefort <address@concealed>
Sent: Tuesday, May 02, 2023 10:04 AM
To: Widerski, Betty <address@concealed>
Subject: Re: [en@sympa] How to prevent "which" email command for showing subscription to a specific list?

 

If so, I would say that it’s a bug, and a fix request would be fine.

Because as a listmaster, I expect subscribers not to receive such lists. It’s a serious information disclosure.

 

 

Mathieu Roquefort
Chef de projet internet
Secours populaire français
Tél. : 33 (0)6 07 11 69 01
9/11 rue Froissart - 75140 Paris cedex 03
secourspopulaire.fr

    

 

De : "Widerski, Betty" <address@concealed>
Date : mardi 2 mai 2023 à 15:27
À : Mathieu Roquefort <address@concealed>
Objet : RE: [en@sympa] How to prevent "which" email command for showing subscription to a specific list?

 

Hi Mathieu,

 

No – I tried that, testing with a non-privileged subscriber account to a list with review set to only owners and listmasters – that user did get a which response including that list.

 

I’m going to test the visibility setting Stephan sent yesterday.

 

Thanks

Betty

 

Betty Widerski

Cloud & Server Engineering – HBS Information Technology

HARVARD  BUSINESS  SCHOOL     

Shad 108 N | address@concealed | T: 617.495.6642

 

 

From: Mathieu Roquefort <address@concealed>
Sent: Tuesday, May 02, 2023 3:12 AM
To: Widerski, Betty <address@concealed>
Subject: Re: [en@sympa] How to prevent "which" email command for showing subscription to a specific list?

 

You don't often get email from address@concealed. Learn why this is important

Hello Betty,

 

I think you just need to set the review parameter to owner or listmaster.

I didn’t test the which command, but my guess is that subscribers wouldn’t get an answer in that case.

 

Regards,

 

Mathieu Roquefort
Chef de projet internet
Secours populaire français
Tél. : 33 (0)6 07 11 69 01
9/11 rue Froissart - 75140 Paris cedex 03
secourspopulaire.fr

    

 

De : <address@concealed> au nom de "Widerski, Betty" <address@concealed>
Répondre à : "Widerski, Betty" <address@concealed>
Date : lundi 1 mai 2023 à 20:04
À : "address@concealed" <address@concealed>
Objet : [en@sympa] How to prevent "which" email command for showing subscription to a specific list?

 

We have some student lists whose subscribers need to be hidden until certain status announcements are made. We would like to be able to quiet load the lists’ subscribers earlier than the announcements, but do not want any savvy users to send a “which” email command that would tell them they were subscribed to any list in that group. Is there a parameter I can set by list not to report the list in a “which” command?

 

I tried setting Subscription profile (default_user_options) visibility (visibility) to “conceal” but that didn’t block the “which” command (and didn’t block the user seeing the list in “my lists”)

 

If there is no way to do this per list, is there a configuration parameter whereby I can block ALL email commands to all lists if necessary?

 

Thanks

Betty

 

Betty Widerski

Cloud & Server Engineering – HBS Information Technology

HARVARD  BUSINESS  SCHOOL     

Shad 108 N | address@concealed | T: 617.495.6642

 

 

---

This email was scanned by Bitdefender