<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Give users specific access with sudo</title>
	<atom:link href="http://www.ghacks.net/2009/06/24/give-users-specific-access-with-sudo/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.ghacks.net/2009/06/24/give-users-specific-access-with-sudo/</link>
	<description>A technology blog covering software, mobile phones, gadgets, security, the Internet and other relevant areas.</description>
	<lastBuildDate>Wed, 25 Nov 2009 11:58:24 -0600</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Give users specific access with sudo - Computer Forums</title>
		<link>http://www.ghacks.net/2009/06/24/give-users-specific-access-with-sudo/#comment-837543</link>
		<dc:creator>Give users specific access with sudo - Computer Forums</dc:creator>
		<pubDate>Thu, 25 Jun 2009 12:28:31 +0000</pubDate>
		<guid isPermaLink="false">http://www.ghacks.net/?p=13835#comment-837543</guid>
		<description>[...]  [...]</description>
		<content:encoded><![CDATA[<p>[...]  [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: thebillywayne</title>
		<link>http://www.ghacks.net/2009/06/24/give-users-specific-access-with-sudo/#comment-837532</link>
		<dc:creator>thebillywayne</dc:creator>
		<pubDate>Thu, 25 Jun 2009 12:16:54 +0000</pubDate>
		<guid isPermaLink="false">http://www.ghacks.net/?p=13835#comment-837532</guid>
		<description>Me? Hate on nano? Never.  

It&#039;s just that every sudoers file I&#039;ve ever read has the following line:
# This file MUST be edited with the &#039;visudo&#039; command as root.

But it turns out that I&#039;m wrong.  `visudo` has the ability invoke whatever editor you have stored in your $EDITOR variable.

from the man page,

       env_editor  
                  If set, visudo will use the value of the EDITOR or VISUAL environment vari-
                   ables before falling back on the default editor list.  Note that this may
                   create a security hole as it allows the user to run any arbitrary command as
                   root without logging.  A safer alternative is to place a colon-separated list
                   of editors in the editor variable.  visudo will then only use the EDITOR or
                   VISUAL if they match a value specified in editor.  This flag is on by
                   default.

So you can use any editor you like.  But you still *have* to use the `visudo` command. 
 
So ...

export EDITOR=nano
sudo visudo


nano works fine.  However, I have it on good authority that every time someone uses emacs, a puppy somewhere gets shot.  Harsh.  But true.</description>
		<content:encoded><![CDATA[<p>Me? Hate on nano? Never.  </p>
<p>It&#8217;s just that every sudoers file I&#8217;ve ever read has the following line:<br />
# This file MUST be edited with the &#8216;visudo&#8217; command as root.</p>
<p>But it turns out that I&#8217;m wrong.  `visudo` has the ability invoke whatever editor you have stored in your $EDITOR variable.</p>
<p>from the man page,</p>
<p>       env_editor<br />
                  If set, visudo will use the value of the EDITOR or VISUAL environment vari-<br />
                   ables before falling back on the default editor list.  Note that this may<br />
                   create a security hole as it allows the user to run any arbitrary command as<br />
                   root without logging.  A safer alternative is to place a colon-separated list<br />
                   of editors in the editor variable.  visudo will then only use the EDITOR or<br />
                   VISUAL if they match a value specified in editor.  This flag is on by<br />
                   default.</p>
<p>So you can use any editor you like.  But you still *have* to use the `visudo` command. </p>
<p>So &#8230;</p>
<p>export EDITOR=nano<br />
sudo visudo</p>
<p>nano works fine.  However, I have it on good authority that every time someone uses emacs, a puppy somewhere gets shot.  Harsh.  But true.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jack Wallen</title>
		<link>http://www.ghacks.net/2009/06/24/give-users-specific-access-with-sudo/#comment-837056</link>
		<dc:creator>Jack Wallen</dc:creator>
		<pubDate>Wed, 24 Jun 2009 21:35:43 +0000</pubDate>
		<guid isPermaLink="false">http://www.ghacks.net/?p=13835#comment-837056</guid>
		<description>Billy: Are you hating on nano? ;-) I bet if I said to edit it with emacs a war would start.</description>
		<content:encoded><![CDATA[<p>Billy: Are you hating on nano? ;-) I bet if I said to edit it with emacs a war would start.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Billy Wayne</title>
		<link>http://www.ghacks.net/2009/06/24/give-users-specific-access-with-sudo/#comment-837047</link>
		<dc:creator>Billy Wayne</dc:creator>
		<pubDate>Wed, 24 Jun 2009 21:23:44 +0000</pubDate>
		<guid isPermaLink="false">http://www.ghacks.net/?p=13835#comment-837047</guid>
		<description>Oh no!  You *have* to edit sudoers with `visudo` and nothing else!!  sudo visudo  

you have to learn some basic vi keystrokes but that&#039;s better than fubar&#039;ing sudoers!</description>
		<content:encoded><![CDATA[<p>Oh no!  You *have* to edit sudoers with `visudo` and nothing else!!  sudo visudo  </p>
<p>you have to learn some basic vi keystrokes but that&#8217;s better than fubar&#8217;ing sudoers!</p>
]]></content:encoded>
	</item>
</channel>
</rss>
