If you give a user sudo ALL permissions they will be able to set arbitrary environment variables and use "sudo -E". You can add the NOSETENV tag to the ALL keyword as follows: testuser somehost = NOSETENV: ALL - todd