From 189515c4d3f1ed52b83d63577ebefec5c991b281 Mon Sep 17 00:00:00 2001
From: Mark Sapiro <mark@msapiro.net>
Date: Sun, 30 Dec 2018 09:40:15 -0800
Subject: Corrected and augmented some security log messages.

---
 Mailman/Cgi/rmlist.py | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'Mailman/Cgi/rmlist.py')

diff --git a/Mailman/Cgi/rmlist.py b/Mailman/Cgi/rmlist.py
index 4472c1c5..4c37a15d 100644
--- a/Mailman/Cgi/rmlist.py
+++ b/Mailman/Cgi/rmlist.py
@@ -127,6 +127,13 @@ def process_request(doc, cgidata, mlist):
                            mm_cfg.AuthListAdmin,
                            mm_cfg.AuthSiteAdmin),
                           password) == mm_cfg.UnAuthorized:
+        remote = os.environ.get('HTTP_FORWARDED_FOR',
+                 os.environ.get('HTTP_X_FORWARDED_FOR',
+                 os.environ.get('REMOTE_ADDR',
+                                'unidentified origin')))
+        syslog('security',
+               'Authorization failed (rmlist): list=%s: remote=%s',
+               mlist.internal_name(), remote)
         request_deletion(
             doc, mlist,
             _('You are not authorized to delete this mailing list'))
-- 
cgit v1.2.3