3 ms·
If your sudoers policy allows you to run vi then you've already failed. sudoedit(8) has been around for a long time and it solves this problem.
by cuckcuckspruce 9y ago
If your sudoers policy allows you to run vi then you've already failed.
sudoedit(8) has been around for a long time and it solves this problem.
- isostatic 9y agoFailed at what? I want my sysadmins to have full access, I just want to know what they did. I'm not trying to defend against malicious staff members - I trust them, otherwise they wouldn't have sudo access.
- cuckcuckspruce 9y agoIf you can trust your administrators then you don't need to worry about shell escapes in editors. The idea for sudoedit is that it allows you to allow non-root users to safely edit files, and if they shell out of their editor then they've not gained root rights - they edit a temporary file as a regular user and then sudo moves the file into place after it is edited.