On 2013.05.18 12:43, Justin Krejci wrote: > The glory of sudo allows you to granularly deny certain uses of commands mixed with certain arguments/options. I am sure I read a document > online a few years back on the subject of safe sudo practices. I had developed a nice sudoers file for use on an email server system shortly > after a colleague accidentally ran a similar command at the root level of the mailbox directory. This is really the whole point of sudo, and it's nice to see someone using it properly. Why some people think it's a good idea to use it to grant a user full root access still escapes me. It seems like a great tool intended to greatly enhance security is now being used mostly to degrade it.