Re: Access to nfs server, Part 2

From: Kyle Maxwell (krmaxwell_at_gmail.com)
Date: 07/24/04

  • Next message: Alvin Oga: "Re: Hack attempt"
    Date: Fri, 23 Jul 2004 20:25:10 -0500
    To: Scott Gifford <sgifford@suspectclass.com>
    
    

    On Fri, 23 Jul 2004 12:14:05 -0400, Scott Gifford
    <sgifford@suspectclass.com> wrote:

    > This will only work if you're very careful of what commands you allow
    > them to run, and the commands are designed to be run with elevated
    > privileges. Otherwise the developer may be able to use command-line
    > options or interactive commands to get into a shell or otherwise run
    > arbitrary commands.

    Check out rvim (in Fedora it's part of the vim-minimal package and is
    likely found on other distros). From vim(1):

           Vim behaves differently, depending on the name of the command (the exe-
           cutable may still be the same file).

           rvim rview rgvim rgview
                     Like the above, but with restrictions. It will not be possi-
                     ble to start shell commands, or suspend Vim. Can also be
                     done with the "-Z" argument.

    Haven't used it but it's worth looking into.

    -- 
    Kyle Maxwell
    krmaxwell@gmail.com
    

  • Next message: Alvin Oga: "Re: Hack attempt"