sudoers配置文件，如何限制命令只对某一目录或文件起作用？

zcsgamer

如：abc ALL=/bin/ls /root/

可执行时显示：Sorry, user abc is not allowed to execute '/bin/ls' as root on vs0.cdut.

应该怎样写呢？