On Mon, Jan 05, 2009 at 12:12:31PM -0600, skip@pobox.com wrote:
Maybe all that's necessary is to install cgi-bin/create as cgi-bin/create.disabled by default, set its permissions to not allow execution and add a note to the installation docs about the consequences of through-the-web list creation and how to set it up.
Or perhaps those responsible for the set-up look at what's being set-up, and take responsibility/make the choice themselves?
From memory, and on Debian/FBSD systems at least, setting up Mailman still requires intervention to sort out the web-interface/MTA integration -- even when packaged -- : that's good enough, imo.
-- ``You can't be a real country unless you have a beer and an airline. It helps if you have some kind of a football team, or some nuclear weapons, but at the very least you need a beer.'' (Frank Zappa)