On 05.01.2018 21:46, Roberto C. Sánchez wrote: > There is essentially no functional difference between allowing only the > EDITOR variable and any arbitrary environment variable. Allowing EDITOR > (or PAGER, or any other thing that sets the name of a command to > execute) through to sudo provides an effective route to bypass any sudo > restrictions.
OK. Thanks for correction. best regards, Ulf
