On 25/01/2013 08:15, Petr Bena wrote: > Why renaming ALL? > ALL is all users, including local (system) users - if ALL are allowed to run all commands, passwordless you can get into cases where a web exploit suddenly has full root access to the box via the apache or nobody account. - Damian