To close out last week I was asked to review an attempt to lock down sudoers rules for a specific user. This included, in a command alias, a wildcard argument. Anyone who has ever had the displeasure of reading the sudoers manpage knows this is dangerous, but at least this opened the door for a conversation about the right way to do what was intended.