Xref: utzoo comp.editors:1838 comp.unix.shell:211 comp.unix.misc:61
Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!samsung!munnari.oz.au!bruce!monu1!monu6!rda353l
From: rda353l@monu6.cc.monash.edu.au (a.r. 8947277 baxter)
Newsgroups: comp.editors,comp.unix.shell,comp.unix.misc
Subject: Re: PD ed required
Message-ID: <1990Sep18.091609.9273@monu6.cc.monash.edu.au>
Date: 18 Sep 90 09:16:09 GMT
References: <1990Sep14.012153.12702@ibmpcug.co.uk> <1990Sep15.200951.26913@Neon.Stanford.EDU>
Organization: Chisholm Institute of Technology, Melb., Australia
Lines: 21

dkeisen@Gang-of-Four.Stanford.EDU (Dave Eisen) writes:

>In article <1990Sep14.012153.12702@ibmpcug.co.uk> dylan@ibmpcug.co.uk (Matthew Farwell) writes:
>>I need to have a secure version of it ie no shell escapes.
>Something that has worked for us in similar cases is to use a shell script:
>SHELL=
>export SHELL
>exec ed $*
>Dave Eisen                      	    Home: (415) 323-9757
>dkeisen@Gang-of-Four.Stanford.EDU           Office: (415) 967-5644

I just followed up to a similar question in comp.unix.questions pointing
out that this doesnt work. Inside vi, you type '<ESC>:set shell=/bin/sh', 
then you can shell out to your hearts content.

You might want to get the source for one of the PD vi-clones, and modify
that; or there may be some other way to do this.

Anthony Baxter:                              
rda353l%monu6.cc.monash.oz@uunet.UU.NET        Robotics and Digital Technology
{uunet}!munnari!monu6.cc.monash.oz!rda353l     Monash University, Caulfield