Here's how to stop shell escapes from vi

[Greg Onufer]

>There are a few problems, of course:

>a) Unless you have symlinks, you can't link in files that are on a
>different filesystem.  In general, you either want to create this mini
>system on the root FS (so you can link in stuff from /bin and /usr) or
>you have to waste a lot of disk space copying those binaries.
[[ ... stuff deleted ... ]]
>Chroot plus symlinks would create the perfect secure mini-environment.

Not really.  Symlinks will not work in a chroot-ed environment since the 
files they "point" to are not accessible.  You have to use hardlinks or
copy the files.  (I encountered this with SunOS 4.0 a while back).

Cheers!greg