Bug 73 - sudo vi
sudo vi
Status: RESOLVED FIXED
Product: Sudo
Classification: Unclassified
Component: Sudo
1.6.5
PC ReliantUNIX
: high normal
Assigned To: Todd C. Miller
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2002-03-05 10:01 MST by wilsojos
Modified: 2002-03-05 14:03 MST (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description wilsojos 2002-03-05 10:01:22 MST
Using sudo vi you can run shell commands.  Is this a problem?

Thanks,

Josh Wilson
Comment 1 Todd C. Miller 2002-03-05 10:03:59 MST
You should not give users sudo access to command with shell escapes if you
wouldn't also trust them with a shell.  This is documented in the manual.