Stefan O'Rear wrote: > How about a serializing wrapper? > Now, if you make the script NOPASSWD sudo -u sa_learn able, and make > sa_learn only executable by user sa_learn, only one will be running at a > time. Or you could make the script setGID, then remove world read and execute rights on the binary. Create a special group just for running this wrapper, and make it the group of the script and binary. Adam