To allow "someuser" to run /bin/ksh as "fakeuser" on "somemachine" you could do: someuser somemachine=(fakeuser) /bin/ksh then "someuser" could run "sudo -u fakeuser /bin/ksh" - todd