The sudoers variable is env_editor, not enveditor.
From Jean-Francois Saucier.
This commit is contained in:
@@ -44,7 +44,7 @@ your system, as determined by the I<configure> script. Normally,
|
|||||||
B<visudo> does not honor the C<VISUAL> or C<EDITOR> environment
|
B<visudo> does not honor the C<VISUAL> or C<EDITOR> environment
|
||||||
variables unless they contain an editor in the aforementioned editors
|
variables unless they contain an editor in the aforementioned editors
|
||||||
list. However, if B<visudo> is configured with the I<--with-enveditor>
|
list. However, if B<visudo> is configured with the I<--with-enveditor>
|
||||||
flag or the I<enveditor> C<Default> variable is set in I<sudoers>,
|
flag or the I<env_editor> C<Default> variable is set in I<sudoers>,
|
||||||
B<visudo> will use any the editor defines by C<VISUAL> or C<EDITOR>.
|
B<visudo> will use any the editor defines by C<VISUAL> or C<EDITOR>.
|
||||||
Note that this can be a security hole since it allows the user to
|
Note that this can be a security hole since it allows the user to
|
||||||
execute any program they wish simply by setting C<VISUAL> or C<EDITOR>.
|
execute any program they wish simply by setting C<VISUAL> or C<EDITOR>.
|
||||||
|
Reference in New Issue
Block a user