Note to future self: when running emerge net-mail/mailman first go into the relevant .ebuild file and change the MAILGID to the group sendmail runs as (normally ‘daemon’, or ‘2’) and the APACHEGID to the group apache runs under (normally ‘apache’ on Gentoo systems, but it’s typically ‘www’ on my customized processes).