On Sun, Nov 12, 2006 at 04:56:33AM -0500, Mike Frysinger wrote: > On 11/12/06, Harald van Dijk <[EMAIL PROTECTED]> wrote: > >On Sun, Nov 12, 2006 at 04:34:25AM -0500, Mike Frysinger wrote: > >> On 11/12/06, Peter Volkov (pva) <[EMAIL PROTECTED]> wrote: > >> >The possible solution is to add virtual/editor ebuild > >> > >> this is a horrible idea > >> > >> why not modify sudo to not filter the EDITOR env var then there is no > >> more problem > > > >Except for a gaping security hole. > > pulling a ciaranm here huh ? if a guy has access to `sudo`, then > having a modified environment isnt going to make much difference
sudo can be configured to only allow access to a select few applications. Allowing arbitrary EDITOR settings completely bypasses this. -- gentoo-dev@gentoo.org mailing list