diff --git a/src/sudoers/mod.rs b/src/sudoers/mod.rs
index 27dc30704..b7b3b16dd 100644
--- a/src/sudoers/mod.rs
+++ b/src/sudoers/mod.rs
@@ -547,6 +547,7 @@ fn match_token<T: basic_parser::Token + std::ops::Deref<Target = String>>(
 fn match_command<'a>((cmd, args): (&'a Path, &'a [String])) -> (impl Fn(&Command) -> bool + 'a) {
     let opts = glob::MatchOptions {
         require_literal_separator: true,
+        require_literal_leading_dot: true,
         ..glob::MatchOptions::new()
     };
     move |(cmdpat, argpat)| {