Unix administration - Re: Beginner Question: Allowing sudo to vi hosts file

Author

Re: Beginner Question: Allowing sudo to vi hosts file

John Hill

2006-07-14, 1:20 am

Dave Hinz wrote:
> On 13 Jul 2006 14:40:57 -0700, underh20.scubadiving@gmail.com <underh20.scubadiving@gmail.com> wrote:
>
> It depends on what your sudoers file looks like already - do you have
> user aliases, and cmnd aliases set up or is it just user can do thing in
> its configuration?
>
> If you can send a few lines of it showing the format you're using (it's
> very flexible and therefore unpredictable) that'd help us help you.
>
> Dave Hinz

You should be careful with this. Unless you block it somehow the user
could use :sh to escape to a shell from vi and have root access to the
system. I beleive there are versions of vi or vim that can be
recompiled to prevent this.

John