A program that runs one command as another user (usually root) if the sudoers policy allows it, and logs the attempt.