@storming right - by default, ...

@storming right - by default, sudoers can run any binary, but you can curtail that in /etc/sudoers  - lots of interesting sudo tricks