PD ed required

a.r. 8947277 baxter rda353l at monu6.cc.monash.edu.au
Tue Sep 18 19:16:09 AEST 1990


dkeisen at Gang-of-Four.Stanford.EDU (Dave Eisen) writes:

>In article <1990Sep14.012153.12702 at ibmpcug.co.uk> dylan at ibmpcug.co.uk (Matthew Farwell) writes:
>>I need to have a secure version of it ie no shell escapes.
>Something that has worked for us in similar cases is to use a shell script:
>SHELL=
>export SHELL
>exec ed $*
>Dave Eisen                      	    Home: (415) 323-9757
>dkeisen at Gang-of-Four.Stanford.EDU           Office: (415) 967-5644

I just followed up to a similar question in comp.unix.questions pointing
out that this doesnt work. Inside vi, you type '<ESC>:set shell=/bin/sh', 
then you can shell out to your hearts content.

You might want to get the source for one of the PD vi-clones, and modify
that; or there may be some other way to do this.

Anthony Baxter:                              
rda353l%monu6.cc.monash.oz at uunet.UU.NET        Robotics and Digital Technology
{uunet}!munnari!monu6.cc.monash.oz!rda353l     Monash University, Caulfield



More information about the Comp.unix.misc mailing list