you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 1 year ago (5 children)

It doesn't edit the file directly, it creates a temp file that replaces the file when saving. It means that the editor is run as the user, not as root.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 3 points 1 year ago (4 children)

    So it opens the file in your editor, since you have read access to it. Then saves your changes to a temp file. Then when you close the editor it does a sudo mv tmpfile readfile?

    I checked this by checking the file ownership when running touch myself. The file is owned by root. sudo nano myself also creates a file owned by root. sudoedit myself removed at me not to run it in a writable directory.

    sudoedit: myself: editing files in a writable directory is not permitted

    So I ran it in a non-writable directory and the resulting file is still owned by root.

    So is the advantage of sudoedit preventing a possible escalation of privileges situation?

  • source
  • parent
  • hideshow 4 child comments
  • [–] 7 points 1 year ago (2 children)

    For me personally the advantage is that since the editor is opened by your user, it has all of the same config that I'm used to (such as my souped up Neovim config).

    Whereas if you sudo nvim /path/to/file then the editor is opened as root and you don't have the same configuration.

  • source
  • parent
  • hideshow 2 child comments