Is there a way to have a sudoers entry that allows executing of only a particular command, without any extra arguments? I can't seem to find a resource that describes how command matching works with sudoers.

Say I want to grant sudo for /path/to/executable arg.

Does an entry like the following:

user ALL=(ALL) /path/to/executable arg

strictly allow sudo access to a command exactly matching that? That is, it doesn't grant user sudo privileges for /path/to/executable arg arg2?