[sudo-workers] The editor used via visudo (mistake in sudo-1.6.8/INSTALL)

Norihiko Murase skeleten at shillest.net
Sat Aug 21 14:06:12 EDT 2004


Hi, I found the mistake on the editor used via visudo in
sudo-1.6.8/INSTALL. I attach the patch here:
----- (cut here) -------------------------------------------
--- INSTALL.old	Fri Aug  6 09:40:58 2004
+++ INSTALL	Sat Aug 21 16:07:37 2004
@@ -484,17 +484,17 @@
   --with-editor=PATH
 	Specify the default editor path for use by visudo.  This may be
 	a single pathname or a colon-separated list of editors.  In
 	the latter case, visudo will choose the editor that matches
-	the user's USER environment variable or the first editor in
+	the user's EDITOR or VISUAL environment variable or the first editor in
 	the list that exists.  The default is the path to vi on your system.
 
   --with-env-editor
 	Makes visudo consult the EDITOR and VISUAL environment variables before
 	falling back on the default editor list (as specified by --with-editor).
 	Note that this may create a security hole as it allows the user to
 	run any arbitrary command as root without logging.  A safer alternative
-	is to use a colon-separated list of editors with the --with-env-editor
+	is to use a colon-separated list of editors with the --with-editor
 	option.  visudo will then only use the EDITOR or VISUAL if they match
 	a value specified via --with-editor.
 
   --disable-authentication
----- (cut here) -------------------------------------------

When I specified the colon-separated list as the value of
--with-env-editor configure option, an error occured as follows:
    % ./configure --with-env-editor='/usr/local/bin/vim:/usr/bin/vi'
    [....]
    configure: error: "--with-env-editor does not take an argument."


Best regards,
---
Norihiko Murase
  The University of Aizu
E-mail: skeleten [AT] shillest.net
        s1080224 [AT] u-aizu.ac.jp



More information about the sudo-workers mailing list