doas, su discussion

vazub
Well, I certainly don't need sudoedit for any of its sysadmin use cases. I personally use sudoedit over sudo vim because it preserves all of my plugins and customisations in my .vimrc, syntax highlighting being the main one.

This is why I was wanting to know if @rvp's sued script could mimic this functionality of copying the file to a user accessible directory for editing (with my tricked out vim config) and then move the file back into the system directory where it belongs.

pfr
The keepenv/setenv options in doas.conf should fix that need for you as well. Have a try: https://flak.tedunangst.com/post/doas-mastery

vazub
Excellent, I didn't know that. So would it look something like this:

permit setenv { EDITOR=vim } dave
OR
permit setenv { ENV=/home/dave/.vimrc } dave

OR, can I just set this for the wheel group with:

permit setenv { ENV=/home/dave/.vimrc } wheel ?

For keepenv however, would something like permit keepenv :wheel be sufficient?

Although, I read that "sometimes, there are situations where overwriting every environment variable can break things" so therefore keepenv may not be the best solution. Unless of course I could use it something like this:
permit keepenv dave cmd vim, which I assume would apply only to my user and the vim command respectively?

I will play around with this when I'm back at my machine (currently on my work laptop).

I may use this solution on my Void box as I still use doas there. On my NetBSD system however It would be handy if I could just continue to use the above sued scripts which simply utilises su and still preserve the user environment.

pfr I personally use sudoedit over sudo vim because it preserves all of my plugins and customisations in my .vimrc, syntax highlighting being the main one.

In that case this minimal version (which uses the -m flag of su) should be sufficient:

Minimal sued.sh

#!/bin/sh

set -eu
umask 077
rm -f /tmp/sued-helper.sh	# prevent any symlink shenanigans
echo 'exec /usr/bin/vi -S "$@"' > /tmp/sued-helper.sh
exec su -m root /tmp/sued-helper.sh "$@"

I"ve also updated the sudoedit work-alike script above.

rvp I recommend using the real thing

nahhhh, that little script is all I need. Thanks again!

However, I tried the longer version above (on Void Linux) and for some reason it doesn't like this line:

λ ~ ./sued.sh /usr/local/bin/ec                                                                                                                                                      
Password:
./sued.sh: 92: set: Illegal option -o pipefail

whether it has anything to do with linux or zsh I dont know but I'll test it on my Thonkpad later.