Re: Does nan allow for shell escape?

Benno Schulenberg <[email protected]>
Newsgroups gmane.editors.nano.general
Message-ID <[email protected]>
Hello Mark,

> We have users that are wanting to edit files owned by root and we have 
> restrictions that restrict that activity. My question is, does nan allow for 
> shell escape in order to invoke other commands or scripts?

In it's default mode, nano will allow the executing of commands (and
reading their output into the current buffer) with ^R ^X.

> I’m not finding any doc stating that it will/can or restricts those
> activities.

Doing 'man nano' and searching for "restrict" should have given you the
answer.  But to expand on that:

If you make it so that those users, when they sudo or whatever, can
only execute 'nano --restricted' (or 'rnano') and not plain nano,
then you should have a safe way to let those users edit files owned
by root without them being able to do anything other than that.

Benno
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.