Re: .exrc file security risks

On Wed, Apr 30, 2003 at 08:09:49AM -0400, Reg Quinton wrote:
> > external commands. So you have the situation where if a .exrc file is

There's a cautionary note in the Vim help files that has to do with ".exrc" files in directories other than $HOME; those get read as default behavior unless "secure" is set in EXINIT or "~/.exrc" (note that this is standard for "vim"; I _believe_ it's also standard for "vi" but have no way to test at the moment.) A user opening up an untrusted tarball is all it would take.

Ben Okopnik
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Linux: The OS people choose without $200,000,000 of persuasion.

• Mike Coleman