sudostrict alerts when target program or script can be edited by non-root user

sudostrict.sh

# This wrapper alerts user when target is non-root editable.
#
# sudo is most often used to run command or script with root privileges.
# IF target program or script being run is editable by non-root 
# THEN a privilege escilation attack is exposed. 
# e.g. an attacker that has gained access to users enviornment could then 
#      use a non-root editable program/script to elivate to root.
#
# IMPORTANT: be certain where this code is stored and loaded is only 
#            editable by root user.
#
function sudostrict () {
  while getopts hHvVkKAnbEPsSilg:h:p:u:U:C:T: opt; do continue; done
  CMD="${@:$OPTIND:$#}"
  test ! -e "$CMD" && CMD=$(which "$CMD") && CMD=$(readlink -f "$CMD")
  if [ -e "$CMD" ]; then
    l=($(/bin/ls -l "$CMD"))
    [ "${l[0]:2:1}" != "-" ] && [ "${l[2]}" != "root" ] ||
    [ "${l[0]:5:1}" != "-" ] && [ "${l[3]}" != "root" ] ||
    [ "${l[0]:8:1}" != "-" ] && { 
      echo -e "\nALERT: modifiable by non-root:\n\n${l[@]}\n";}
    /usr/bin/env sudo "$@"
  else
    echo "could not resolve location of command $CMD"
  fi
}
alias sudo='sudostrict '