Marc Weber wrote:
> I did notice that you can do
> su
> gvim
> :echo SERVERNAME
>
> and then using another user
> gvim --servername=GVIMxx --remote-send='!/dowhatyouwant ;-)'
>
> Thus: If you know your admin is using vim you can easily try to get one
> gvim instance to execute arbitrary commands as super user!!
>
> Don't think this shuold be the case by default.
>
> In my case it does what I want but..
>
> Did I miss anything?
Vim uses the X server for communication. Only users with write access
to the X server can send a message to Vim. And if you have write
access, you are also able to send keystrokes to another process, thus
you can do anything anyway. E.g., by sending keystrokes to an xterm in
which a shell is running.
That is, I think it works this way. Perhaps someone with more detailed
knowledge of X server access restrictions can give a better answer.
--
hundred-and-one symptoms of being an internet addict:
75. You start wondering whether you could actually upgrade your brain
with a Pentium Pro microprocessor 80. The upgrade works just fine.
/// Bram Moolenaar -- [EMAIL PROTECTED] -- http://www.Moolenaar.net \\\
/// sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ \\\
\\\ download, build and distribute -- http://www.A-A-P.org ///
\\\ help me help AIDS victims -- http://ICCF-Holland.org ///
