Abuse sudo LD_PRELOAD and LD_LIBRARY_PATH
If sudoers preserves LD_PRELOAD or LD_LIBRARY_PATH, any command you are allowed to run as root loads your shared object first.
If sudoers preserves LD_PRELOAD or LD_LIBRARY_PATH, any command you are allowed to run as root loads your shared object first.