RTFM sudoers question

[Dan Kressin]

--- On Tue, 11/23/10, Jerry Feldman <gaf-mNDKBlG2WHs at public.gmane.org> wrote:
> FES ALL = (genuser) ALL
> 
> Would this allow greg, andrew and matt to beable to run
> sudo -u genuser,
> but not use sudo to become any other user or root.

Yes.  The "(username)" controls which users FES can run commands as.  The common "(ALL)" lets them run the listed commands and any user, but notably root included.

-Dan