/var/mail is a problem.

if you make it world writable, it becomes a massive security hole.

if you don't make it world writable, it becomes vastly less useful
for a network.


i personally have mail delivered into each users $HOME.  yes, i
know that this isn't always feasible, in some networks... but given
the choice, it's the only way i'll do local mail delivery.