Help with /etc/sudoers -- Command Exceptions

[egan]

I would like to make a few commands bypass the sudo authentication. Specifically:

mount
shutdown,poweroff,halt,reboot, etc.
netcfg

All other commands are reserved for the wheel group, and they need password. I want the above commands to be executable by anyone in the users group, with a password.

Any help would be appreciated. I also would like advice about the the possible security problems with the mount command usable by everyone (just for my information).

[reed9]

%users ALL = NOPASSWD: /sbin/shutdown, /sbin/reboot, /sbin/mount, /sbin/umount

and whatever other commands you want

I believe the file is read in order, so later contradictory rules would take precedence. (ie, probably put it at the end of the file)

[egan]

Thanks. That works quite nicely.

[chris81]

I think you don't have to specify the /sbin/umount command, because when someone uses the mount commands, it writes into /etc/mtab user=NAME. This way, the user NAME can use the umount command.