The sudoers variable is env_editor, not enveditor.

From Jean-Francois Saucier.
This commit is contained in:
Todd C. Miller
2007-04-12 15:18:15 +00:00
parent 666c85dba2
commit b679cb930b

View File

@@ -44,7 +44,7 @@ your system, as determined by the I<configure> script. Normally,
B<visudo> does not honor the C<VISUAL> or C<EDITOR> environment
variables unless they contain an editor in the aforementioned editors
list. However, if B<visudo> is configured with the I<--with-enveditor>
flag or the I<enveditor> C<Default> variable is set in I<sudoers>,
flag or the I<env_editor> C<Default> variable is set in I<sudoers>,
B<visudo> will use any the editor defines by C<VISUAL> or C<EDITOR>.
Note that this can be a security hole since it allows the user to
execute any program they wish simply by setting C<VISUAL> or C<EDITOR>.