> > > Yes, there is something wrong with it. This way the list manager of ANY
> > > list can see the master passwd. Furthermore, they can change whether
> > > their list respects the master password.
> >
> If you have either the admin password or the list.passwd for a list
> you can use the config command to majordomo to get a copy of your
> config. You can also use newconfig to change your config. The point
> of the admin and list.passwd is that they allow people to
> manipulate their configurations.
You're right, of course. I had forgotten that I had taken that out
of our majordomo a while back -- to the point that I entirely forgot
that majordomo could do that in most environments.
Please, unless you've removed the config/newconfig/writeconfig commands
from majordomo, don't do what I mentioned earlier!
And Jeffrey, thanks for catching me on this. Sorry about the trouble.
Chris
References:
|
|
