# Commands listed for %sudoro should be _mostly safe_ and avoid as much
# as possible writing files or running commands.
%sudoro		ALL=(ALL:ALL) NOPASSWD: \
		/usr/bin/ls, \
		/usr/bin/cat, \
		/usr/bin/tac, \
		/usr/sbin/dmidecode, \
		/usr/bin/tail, \
		/usr/bin/find, \
		!/usr/bin/find *-delete*, \
		!/usr/bin/find *-exec*, \
		!/usr/bin/find *-execdir*, \
		!/usr/bin/find *-ok*, \
		!/usr/bin/find *-okdir*, \
		!/usr/bin/find *-fls*, \
		!/usr/bin/find *-fprintf*, \
		!/usr/bin/find *-fprint*, \
		/usr/bin/tcpdump -Z tcpdump *, \
		!/usr/bin/tcpdump -Z tcpdump *Z*
