/usr/bin/sudo isn't evaluated as a function under ksh.
> And every other suggestion also doesn't work if the attacker can just replace the shell.
> And every other suggestion also doesn't work if the attacker can just replace the shell.