visudo

EDITOR=nano

Comment out "Allow members of group sudo to execute any command" in /etc/sudoers

• It allows ordinary users to sudo -i to root
• It seems to require password for each sudo request. For example, causing failure to Rsync over SSH.