diff --git a/lib/ws-vacation-sudo.in b/lib/ws-vacation-sudo.in
new file mode 100644
--- /dev/null
+++ b/lib/ws-vacation-sudo.in
@@ -0,0 +1,11 @@
+# Allow www user to run the vacation command as a user, but not as root
+User_Alias WWWRUN = wwwrun,www-data
+Runas_Alias NOTROOT = ALL,!root
+Cmnd_Alias VACATION=/usr/bin/vacation *
+Cmnd_Alias RM_FORWARD=/bin/rm -f /home/*/.forward
+Cmnd_Alias CAT_FORWARD=@base_dir@/lib/write_to.sh /home/*/.forward
+Cmnd_Alias CAT_VACATION_MSG=@base_dir@/lib/write_to.sh /home/*/.vacation.msg
+WWWRUN ALL=(NOTROOT) NOPASSWD: VACATION 
+WWWRUN ALL=(NOTROOT) NOPASSWD: RM_FORWARD
+WWWRUN ALL=(NOTROOT) NOPASSWD: CAT_FORWARD
+WWWRUN ALL=(NOTROOT) NOPASSWD: CAT_VACATION_MSG