The sudoers line is%game_servers   ALL=      NOPASSWD:/usr/bin/renicewhich allows group members renice any process run by any user without pw, but I'd like to allow group members renice their own processes only, to negative value.I couldn't spot the answer from man sudoers, from where I got the idea to change ALL=(root:root) to ALL=, which proved to be bad ideaALL=() is syntax error.
Is it possible to force a group member to run something allowed by sudoers as himself only?
sudo;nice