[sudo-users] Re: sudo-users Digest, Vol 23, Issue 8

[Todd C. Miller]

If you are on an OS with an append-only file system flag you can
make the log file append-only.  Then even root can't alter it.  On
BSD systems you use the chflags command, on Linux it is chattr.

 - todd