Truly secure, read-only edior?

King, Daniel Daniel.King at fiserv.com
Tue Jun 18 15:53:35 EDT 2002


Hi, folks –
 
Do you know of a truly secure, read-only editor/file viewer which would be appropriate for use with sudo?  Something which acts in a similar fashion to vi?
 
rvi disallows shell escapes, but you can still write out files.  view/rview still allows writes with “w!”.
 
Any ideas are appreciated.  So far, I’ve found a shell script:
 
#!/usr/bin/ksh
cat $1 | MORE="-c" SHELL="/dev/null" /usr/bin/more
 
Which is good, but I was wondering if there were another way to do this ...
 
A. Daniel King, System Analyst
Fiserv - Atlanta Center
1475 Peachtree Street, NE - Suite 700
Atlanta, GA 30309
404-873-2851 x2034
 




More information about the sudo-users mailing list