diff --git a/install/debian/10/sudo/admin b/install/debian/10/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/debian/10/sudo/admin
+++ b/install/debian/10/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*