Bug 73

Summary: sudo vi
Product: Sudo Reporter: wilsojos
Component: SudoAssignee: Todd C. Miller <Todd.Miller>
Status: RESOLVED FIXED    
Severity: normal    
Priority: high    
Version: 1.6.5   
Hardware: PC   
OS: ReliantUNIX   

Description wilsojos 2002-03-05 10:01:22 MST 
Using sudo vi you can run shell commands.  Is this a problem?

Thanks,

Josh Wilson
Comment 1 Todd C. Miller 2002-03-05 10:03:59 MST 
You should not give users sudo access to command with shell escapes if you
wouldn't also trust them with a shell.  This is documented in the manual.