I'm talking about giving access to specific limited commands. By definition the set is either so limited as to be essentially useless, or it opens (usually mul

I'm talking about giving access to specific limited commands. By definition the set is either so limited as to be essentially useless, or it opens (usually multiple) straightforward paths to a root-shell. Pretty much all sudoers-files I have seen fall in the latter category ("but he can only write the apache config-file!"). And what distro are you running where local privilege escalation is common? https://www.google.com/search?q=linux+local+privilege+escalation https://www.google.com/search?q=linux+local+privilege+escala...