>>>>> "NP" == Nick Perry <nick@aboard.co.uk> writes:
NP> Namely, if the setting for which_access is less strict than who_access,
NP> a user who meets the criteria for doing which but not for doing who may
NP> be able to get a list of subscribers by doing:
NP> which .
Read majordomo.cf and understand $max_which_hits. which is a useful
command for people who are trying to unsubscribe themselves but don't know
exactly which address they are subscribed under, and restricting it (even
to just list members) should be dome with much thought.
Please try to understand the configuration options you have before you yell
"security hole". We have dome some thinking on the matter.
--
Jason L. Tibbitts III - tibbs@uh.edu - 713/743-8684 - 221SR1
System Manager: University of Houston High Performance Computing Center
1994 PC800 "Kuroneko" DoD# 1723
Follow-Ups:
References:
|
|
