diff --git a/files/image_config/sudoers/sudoers b/files/image_config/sudoers/sudoers
index 57248ee8c1c4..1b1979a2e9bb 100644
--- a/files/image_config/sudoers/sudoers
+++ b/files/image_config/sudoers/sudoers
@@ -17,8 +17,10 @@ Defaults        env_keep += "VTYSH_PAGER"
 
 # Cmnd alias specification
 # Note: bcmcmd is dangerous for users in read only netgroups because it may operate ASIC
-Cmnd_Alias      READ_ONLY_CMDS = /usr/bin/portstat,\
-                                 /usr/bin/vtysh -c "show.*"
+Cmnd_Alias      READ_ONLY_CMDS = /usr/bin/decode-syseeprom, \
+                                 /usr/bin/vtysh -c show *, \
+                                 /bin/cat /var/log/syslog, \
+                                 /usr/bin/tail -f /var/log/syslog
 
 # User privilege specification
 root    ALL=(ALL:ALL) ALL
diff --git a/src/sonic-utilities b/src/sonic-utilities
index 452df11df5a4..3378ef8387f6 160000
--- a/src/sonic-utilities
+++ b/src/sonic-utilities
@@ -1 +1 @@
-Subproject commit 452df11df5a47e1d646e5ce846757112b526694f
+Subproject commit 3378ef8387f643f3ef81cbc15a6b4bda95570e21