3.5. Restricting Access with the Command Line: sudoers

By editing the sudoers file, you can take a much more granular approach to securing users' access to resources. Sudo stands for "su do," and su stands for "substitute user." sudo is a command-line utility in Unix, Linux, and Mac OS X that allows users to run programs as though they were another, more powerful user. By default, sudo will run as a system's superuser, or root account (although this can be changed using the runas_default setting in the sudoers file). The syntax sudo will run one command as another user. The syntax su will run all commands that follow it as the administrative user who is invoked. su and sudo are useful tools, but they are also very powerful and can be used to ...

Get Enterprise Mac Security: Mac OS X Snow Leopard now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.