[sudo-blog] Sudo 1.9: using the new approval API from Python

[Todd C. Miller]

Version 1.9 of sudo introduced the approval plugin API, making it
possible to have extra restrictions before executing a command.
These only run after the policy plugin has succeeded, so you can
effectively add additional layers of policy without replacing the
policy plugin and sudoers. Multiple approval plugins may be defined,
and all must succeed in order for the command to be executed.  In
this blog you will find a simple Python script utilizing the approval
API. ...

Read the full blog post at
https://blog.sudo.ws/posts/2020/08/sudo-1.9-using-the-new-approval-api-from-python/