[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: vipw and vigr default editor



On Fri, Jan 05, 2018 at 09:37:16PM +0100, Ulf Volmer wrote:
> On 05.01.2018 21:15, Greg Wooledge wrote:
> > On Fri, Jan 05, 2018 at 03:00:43PM -0500, John Ratliff wrote:
> 
> >> sudo EDITOR=vim vipw
> 
> > Defaults        env_reset
> > Defaults:greg   !env_reset
> 
> That basically keeps the *whole* environment, what is usually a security
> issue. Better solution is to keep only needed and proved environment
> variables using
> 
> Defaults  env_keep += "EDITOR"

It all depends on how much trust this "greg" person.  I hear they can
be very sneaky.


Reply to: