allow user to execute faillog

[linuxeth124]

I want to allow a user to reset people's faillog. When I go into the /etc/sudoers file and put this syntax in I still get an error stating :

/var/log/faillog permission denied. Can someone tell me what I"m missing? Here is what I put syntax:

%user ALL=/usr/bin/faillog,/var/log/faillog

[sanjeevt]

change /var/log/faillog to /usr/bin/tail -f /var/log/faillog

this will allow to use sudo and tail the faillog