Re: chmod 0000 `which sudo`
RPM, on a Mac? The purpose was not to disguise but to quickly and temporarily disable it on OSX. Of course, I am just assuming /usr/bin/which is on there as well. That was for lazy people. Naturally it would be best to know and specifically target the right binary, so nobody could have masked it by dropping an executable dummy "sudo" in an earlier PATH... I'll give you that.