smallsudo is a tool for Unix-like operating systems. It conditionally extends the capabilities of non-administrator users in a controlled and secure way.
The idea is to build something like a queue of requests specifically for the superuser. Instead of, for example, sending an email to the system administrator, users of the smallwheel group can request specific actions to take place (subject to the superuser’s approval).
smallsudo is useful if you want to give the users on your system a lot of
flexibility, but don’t want to give them direct
The tool is in active development and is quite featureless at the moment. It’s a shell script. Download it here.
The real superuser can examine all of the requests and individually approve or deny each one.
You can create a whitelist of commands which smallwheel members are even allowed to try in the first place.
All of the approved commands can be carried out all at once.
If you feel people are abusing their smallwheel privilege, simply remove them from the smallwheel group. You are the administrator, after all.