[bestham]

If they can override sudo, they can override which.

[antonkochubey]

if you use \which it'll always be a shell built-in ;) though someone can put a different shell in your .zshrc

[jolmg]

  $ which() { echo foo; }
  $ \which
  foo

The backslash only prevents alias expansion.

[pepa65]

He meant `command which`

[jolmg]

> it'll always be a shell built-in

`command which` wouldn't have been the built-in

[bandie91]

`exec /tmp/fake-bash` in bashrc to intercept everything?

[zbentley]

Then use the absolute path.