From owner-freebsd-security@FreeBSD.ORG  Mon Apr 21 08:04:26 2008
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 1534A106566B
	for <freebsd-security@freebsd.org>;
	Mon, 21 Apr 2008 08:04:26 +0000 (UTC)
	(envelope-from derek@computinginnovations.com)
Received: from betty.computinginnovations.com (mail.computinginnovations.com
	[64.81.227.250])
	by mx1.freebsd.org (Postfix) with ESMTP id 27BCC8FC2B
	for <freebsd-security@freebsd.org>;
	Mon, 21 Apr 2008 08:04:24 +0000 (UTC)
	(envelope-from derek@computinginnovations.com)
Received: from p28.computinginnovations.com
	(dhcp-10-20-30-100.computinginnovations.com [10.20.30.100])
	(authenticated bits=0)
	by betty.computinginnovations.com (8.14.2/8.14.2) with ESMTP id
	m3KK9FGn030747; Sun, 20 Apr 2008 15:09:16 -0500 (CDT)
	(envelope-from derek@computinginnovations.com)
Message-Id: <6.0.0.22.2.20080420150707.025abec0@mail.computinginnovations.com>
X-Sender: derek@mail.computinginnovations.com
X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22
Date: Sun, 20 Apr 2008 15:09:03 -0500
To: "William O. Yates" <hackware@tru2life.net>, freebsd-security@freebsd.org
From: Derek Ragona <derek@computinginnovations.com>
In-Reply-To: <1208717847.18770@ns3.tru2life.net>
References: <1208717847.18770@ns3.tru2life.net>
Mime-Version: 1.0
X-Antivirus: avast! (VPS 080420-0, 04/20/2008), Outbound message
X-Antivirus-Status: Clean
X-Virus-Scanned: ClamAV 0.93/6806/Wed Apr 16 15:50:16 2008 on
	betty.computinginnovations.com
X-Virus-Status: Clean
X-ComputingInnovations-MailScanner-Information: Please contact the ISP for
	more information
X-MailScanner-ID: m3KK9FGn030747
X-ComputingInnovations-MailScanner: Found to be clean
X-ComputingInnovations-MailScanner-From: derek@computinginnovations.com
X-Spam-Status: No
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Cc: 
Subject: Re: vi secure
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Apr 2008 08:04:26 -0000

At 01:57 PM 4/20/2008, William O. Yates wrote:
>Recently started using vi macros.
>
>When attempting to use one which accessed the external shell, got the 
>following message:
>
>"The ! command is not supported when the secure edit option is set."
>
>When attempting to ":set nosecure" got:
>
>"set: the secure option may not be turned off."
>
>When attempting to "set nosecure" in my .exrc file, got:
>
>set nonumber
>.exrc, 44: set: the secure option may not be turned off
>.exrc, 44: Ex command failed: pending commands discarded
>
>Looking through all the man pages, vi references, tutorials, and the the 
>oreilly vi "bible",
>can't find anything...
>
>Is "set secure" a compiled in setting?
>
> >From FreeBSD vi man page:
>
>        -S     Run  with  the secure edit option set, disallowing all 
> access to
>               external programs.
>and
>        secure [off]
>               Turns off all access to external programs.
>
>..william.o.yates...hackware.at.tru2life.net...tru2life.info...

So you are using ! for external commands and not the like :w!

I would look at any defaults on the system that may be causing vi to run in 
secure mode, also check the mounted filesystem you are on is set to noexec.

         -Derek

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.