run0edit doesn't retain authorization in shell session

[smlx]

With the latest release of polkit, run0 has a feature similar to sudo where privilege is retained in the same terminal session for 5 minutes.

This does not work for run0edit, and based on the discussion in polkit-org/polkit#533 I think this is intentional. I suspect either the subshell restriction will have to be relaxed, otherwise run0edit with privesc retention cannot be implemented in a script and will have to be implemented directly in run0 (e.g. as a run0 -e flag) so the direct parent process is the controlling terminal.

[HastD]

Yes, I'm aware of this but unfortunately I don't see a way for run0edit as it's currently designed to do anything about it; as you said, it would either need to be incorporated into run0 itself (like sudoedit is with sudo) or Polkit would need to relax the subshell restriction.

A third possibility would be a complete rewrite of run0edit to operate on a client/daemon model where the privileged operations are done by a DBus-activated service running as a privileged user, with the daemon interacting with Polkit directly rather than going through run0. I've thought about such a redesign but I'm not sure it'd be worth the effort.