From Gentoo Wiki
Jump to:navigation Jump to:search
Do not allow a normal user to run an application that can enable them to elevate privileges. For instance, allowing users to execute emerge as root can grant them full root access to the system because emerge can be manipulated to change the live file system to the user's advantage. If the sudo users are not trusted, don't grant them any additional rights.