Comment by lttlrck

Maybe also make /usr/bin/sudo immutable? would that help prevent a package manager from messing with it? I think so.