On 2011-12-20 12:20 PM, Florian Philipp <li...@binarywings.net> wrote:
Well, as I've said, using a/normal/ editor doesn't solve the problem
because you can use nano for opening a shell, thereby escalating your
privileges. You have to use rnano (or nano -R). This solution is not
really meant for the luxury of a full blown editor with arbitrary
arguments and capabilities. rnano doesn't read nanorc files, for
example. If you cannot agree on a common set of safe flags, you
shouldn't use sudo for this purpose.
Points taken from all, thanks...
I settled on requiring the -R flag for nano, and limited the files that
he can edit, so he will simply have to live with this.
Thanks all...
