What criteria could I take in order to to allow or disallow the execution of bash scripts with sudo as root?
I know I should analyze the script but I have not enough time and I trust my developers.
My criteria today is to request the script user owner, group owner and permissions just to be sure the owner and group are root and permissions don't allow the user to modify the script.
For example, is there any tool in order to extract the commands executed within a bash script? I think with this list of command I would be able to evaluate if all command requiere root privileges or not.