How to prevent VI from getting a shell?

[Darryl Wagoner]

In article <501 at trux.UUCP> car at trux.UUCP (Chris Rende) writes:
>If I want to give someone access to VI and yet deny them access to a shell,
>how do I prevent the user from using VI's "<ESC>:!" command?

>I have an application program which launches VI. I don't want the user to
>be able to get to a shell from VI. (I also don't want the user to be able
>to launch other commands from VI. I.e., No :!pwd, or !!sort, etc...).

I am not sure how secure it is, but the simple way is to change the
"SHELL" environment variable to something like "true(1)".  This works
for both <ESC>:! and !!command.


Good luck

-Darryl

-- 
Darryl Wagoner		darryl at lemuria.MV.COM or uunet!virgin!lemuria!darryl
12 Oak Hill Road
Brookline, NH 03033
Office: 603.672.0736   		Home: 603.673.0578