Protect some files from users with sudo access to modify it
How to write protect important file (even root can NOT modify/delete it)
If you have some internal application developed to manage the
users and other stuff. However some admin still some time make changes
/etc/passwd or /etc/master.passwd via sudo. Then the idea of file write
protection comes. I suggested to use them chflags.