Web lists-archives.com

Re: vipw and vigr default editor




On 05.01.2018 21:46, Roberto C. Sánchez wrote:

> There is essentially no functional difference between allowing only the
> EDITOR variable and any arbitrary environment variable.  Allowing EDITOR
> (or PAGER, or any other thing that sets the name of a command to
> execute) through to sudo provides an effective route to bypass any sudo
> restrictions.

OK. Thanks for correction.

best regards,
Ulf