>>>>> "OX" == Oliver Xymoron <email@example.com> writes:
OX> Jason, you might add a note that you should use a -d option for cvs
Good idea; I'm not really a CVS guru but I see that -d would make a lot of
OX> Initial notes: install doesn't prompt for whereami which would be
OX> useful for sites that are running MJ1.x
You mean the perl Makefile.PL part? It's missing a lot of stuff; I'd
really like for it to be able to take a majordomo.cf and extract at least a
few useful things from it.
OX> "configshow GLOBAL" probably shouldn't return anything without a
OX> password - a default access_rule to disable this would probably be a
OX> good thing.
It actually should; the point is that there are variables that you can see
without a password, which are the ones that the interface can get without
authentication. Note that you can't actually change them.
The point is that the core doesn't know who's asking and it doesn't care.
There are some variables it will show without a password and some it won't.
Is your objection from a security standpoint or one of operator confusion?