• one way to run commands as root is using su - to start a new shell
• su is all or nothing
• sudo is finer-grained, prevents compromise of root password
• as root: visudo
• %wheel ALL=(ALL) NOPASSWD: ALL
• %users localhost=/usr/bin/eject
• GROUP MACHINE (WHO TO RUN AS) [OPTION]:COMMANDS
• see /etc/sudoers.d/* and /etc/sudoers NEXT
  PREVIOUS
  Master Index