Re: root group in solaris : Tools


I did once hack up both vi and more so users couldn't shell out, but
unfortunately that code is long gone.

In Solaris 10 you can write a wrapper which removes the "proc_exec"
privilege from the limit set before running vi.

ppriv -e -s L-proc_exec vi

Unfortuantely, vi will allow you to edit any odd file, so that is
probably pointless but it would help for other prorgams.

Casper