"#SUDO checked" for each function - Add code to set SUDO to sudo binary and check that all needed commands are listed. - SUDO can also be an "ask me first" function. Needed sudo commands: - ipchains binary - iptables binary Assumed: - MASONDIR exists and is owned by firewalluser - the entire MASONDIR tree (with the exception of: /var/lib/mason /var/lib/mason/baserules.sample /var/lib/mason/masonlib /var/lib/mason/moreservices /var/lib/mason/nmap-services /var/lib/mason/regression-test is owned by firewalluser - /etc/masonrc is owned by firewalluser