sudo - new user with command list

Question

The following will allow newuser to run any commands anywhere? How can I prevent it by allowing the user to run certain commands only?

visudo

## Allow root to run any commands anywhere
root    ALL=(ALL)       ALL
newuser ALL=(ALL)       ALL

Answer 1

You can create a command alias for newuser e.g.

Cmnd_Alias    NEWUSER_CMDS = /path/to/cmd1, /path/to/cmd2, /path/to/cmd3

then use that as part of the user specification

newuser ALL=(ALL) NEWUSER_CMDS 

Answer 2

newuser ALL=(ALL)       /path/to/your/command

Read User Specification section in the man sudoers page for more details.