[sudo-users] AIX how do you keep people from escaping out of vi?

pDale pdalec at gmail.com
Thu Sep 15 20:28:33 EDT 2011


On Thu, Sep 15, 2011 at 20:05, Mark Janssen <maniac.nl at gmail.com> wrote:

> On Tue, Sep 13, 2011 at 7:36 PM, Pennington, Brian
> <Brian_Pennington at cinfin.com> wrote:
> >
> > > Thanks,
> >
> > Please write the content of your mail _INSIDE_ the mail, not the subject.
> >
> > Otherwise, use NOEXEC, or let them use only sudoedit
>

If it's actually Vim rather than Vi, you can allow them to only use
restricted mode:

-Z		Restricted mode.  All commands that make use of an external
		shell are disabled.  This includes suspending with CTRL-Z,
		":sh", filtering, the system() function, backtick expansion,
		etc.


If it is really Vi, there's one more reason to upgrade.

-- 
pDale Campbell



More information about the sudo-users mailing list