disallowing subshell in More

[mikeh at haddock.UUCP]

Hi there,
	Just a thought, more(1) uses the enviornment variable $SHELL to 
	determine what shell to invoke.  The root id caller of more sets 
	SHELL to an innocuous program the hole vanishes.  I would 
	overimplement and have the $SHELL program setuid and setgid to 
	the user and then exec the users faviorite shell, but setting 
	$SHELL to /bin/true would probably work.  Not, what holes are in 
	my scheme?  
								mike &
								Herbie