On Fri, 2005-12-02 at 14:14, Mike McCarty wrote: > One cannot configure sudo such that one can "vi /etc/one_special_file" > but not "vi /etc/another_special_file". But you can rather easily have a replace_special_file program that only specified users can run and that does nothing else. Vi permits shell escapes and thus like many unix programs, includes the capabilities of all other programs so it's not something you would want to permit a user to do as root even if you could control the initial file loaded. -- Les Mikesell lesmikesell@xxxxxxxxx
