Re: Access to nfs server, Part 2

Kyle Maxwell <[email protected]>
Newsgroups gmane.comp.security.linux
Message-ID <[email protected]>
On Fri, 23 Jul 2004 12:14:05 -0400, Scott Gifford
<[email protected]> wrote:

> This will only work if you're very careful of what commands you allow
> them to run, and the commands are designed to be run with elevated
> privileges.  Otherwise the developer may be able to use command-line
> options or interactive commands to get into a shell or otherwise run
> arbitrary commands.

Check out rvim (in Fedora it's part of the vim-minimal package and is
likely found on other distros). From vim(1):

       Vim behaves differently, depending on the name of the command (the exe-
       cutable may still be the same file).

       rvim rview rgvim rgview
                 Like the above, but with restrictions.  It will not be possi-
                 ble to start shell commands, or suspend  Vim.   Can  also  be
                 done with the "-Z" argument.

Haven't used it but it's worth looking into.

-- 
Kyle Maxwell
[email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.