The policy file that says which users may run which commands as which target users via sudo; edit it only with visudo, which checks the syntax.