Controlling Access

• Flat ascii file called sudoers (visudo insures correct syntax)
• rdist sudoers file or share via NFS (not world-readable!)
• Can control access by user/machine/command (& options w/sudo-1.5+)
• Here is the sudoers file we currently use
• As alluded earlier, be "smart" about what you allow
      Allowing "sudo vi" is basically ALL - duhhh!