updated NO_ROOT_SUDO entry

diff --git a/OPTIONS b/OPTIONS
index b09f4d3fe31cb19c055682e634cc0f158d0cd0d9..92938e8ad869550ff9f40ba9ac7d7ca4d9a4e5d4 100644 (file)
--- a/OPTIONS
+++ b/OPTIONS
@@ -35,8 +35,9 @@ MAXLOGFILELEN
     The default is 80.
 
 NO_ROOT_SUDO
-    Don't let root run sudo.  This is historical from when doing "sudo sudo"
-    would give you a root shell.  You probably don't want to define this.
+    Don't let root run sudo.  This can be used to prevent people from
+    "chaining" sudo commands to get a root shell by doing something
+    like "sudo sudo /bin/sh".
     This is off by default.
 
 ALERTMAIL