From Todd.Miller at sudo.ws  Wed Oct  6 06:59:48 2021
From: Todd.Miller at sudo.ws (Todd C. Miller)
Date: Wed, 06 Oct 2021 06:59:48 -0600
Subject: [sudo-blog] Sudo 1.9.8: intercepting commands
Message-ID: <2f360f4e96a3c25c@sudo.ws>

A month ago, when sudo 1.9.8 was still under development, we checked
out the new log_subcmds option. It allows you log all commands (with
some limitations) that are executed by a command started through
sudo. For example, you can see if a shell was started through a
text editor. The intercept option brings this one step further: you
can prevent sub-commands from even running.

Read the full blog post at
https://blog.sudo.ws/posts/2021/10/sudo-1.9.8-intercepting-commands/