[sudo-workers] The editor used via visudo (mistake in sudo-1.6.8/INSTALL)
Norihiko Murase
skeleten at shillest.net
Sat Aug 21 14:06:12 EDT 2004
Hi, I found the mistake on the editor used via visudo in
sudo-1.6.8/INSTALL. I attach the patch here:
----- (cut here) -------------------------------------------
--- INSTALL.old Fri Aug 6 09:40:58 2004
+++ INSTALL Sat Aug 21 16:07:37 2004
@@ -484,17 +484,17 @@
--with-editor=PATH
Specify the default editor path for use by visudo. This may be
a single pathname or a colon-separated list of editors. In
the latter case, visudo will choose the editor that matches
- the user's USER environment variable or the first editor in
+ the user's EDITOR or VISUAL environment variable or the first editor in
the list that exists. The default is the path to vi on your system.
--with-env-editor
Makes visudo consult the EDITOR and VISUAL environment variables before
falling back on the default editor list (as specified by --with-editor).
Note that this may create a security hole as it allows the user to
run any arbitrary command as root without logging. A safer alternative
- is to use a colon-separated list of editors with the --with-env-editor
+ is to use a colon-separated list of editors with the --with-editor
option. visudo will then only use the EDITOR or VISUAL if they match
a value specified via --with-editor.
--disable-authentication
----- (cut here) -------------------------------------------
When I specified the colon-separated list as the value of
--with-env-editor configure option, an error occured as follows:
% ./configure --with-env-editor='/usr/local/bin/vim:/usr/bin/vi'
[....]
configure: error: "--with-env-editor does not take an argument."
Best regards,
---
Norihiko Murase
The University of Aizu
E-mail: skeleten [AT] shillest.net
s1080224 [AT] u-aizu.ac.jp
More information about the sudo-workers
mailing list