Debian's modular sudoers example

# cat /etc/sudoers.d/00_aliases
Cmnd_Alias PING=/bin/*ping*, /sbin/*ping*, /usr/bin/*ping*, /usr/sbin/*ping*
Cmnd_Alias TRACEROUTE=/bin/*traceroute*, /sbin/*traceroute*, /usr/bin/*traceroute*, /usr/sbin/*traceroute*
Cmnd_Alias NMAP=/usr/bin/nmap, /usr/bin/nping, /usr/bin/ncat

# cat /etc/sudoers.d/grp_sudo
%sudo ALL=(root) NOPASSWD: PING, TRACEROUTE, NMAP