From Dev.to
Sudo command digests do not remove executable trust
Sudo command digests do not remove executable trust A digest in a sudoers rule can answer a narrow question: did the command file have the expected bytes when sudo checked it? It does not prove that...