[sudo-users] Mass runas definition

Marek Svent marek.svent at gmail.com
Thu Jan 5 08:36:24 MST 2023


I have a need to give to some administrators an access to run sudo
into users' accounts. But without giving them access to run commands
as system users. There are hundreds of systems accounts and thousands
of users' accounts and both change as well, so using runas lists is
awkward at best.
Is there a better way than just list every single account in sudoers
file? Theoretically it would be ideal if there would be support for
uid ranges. Something like:
%semigods ALL=(#5000-#65000) INTERCEPT:NOPASSWD: ALL



More information about the sudo-users mailing list