In Windows UAC, if the user attempts to run an executable file, the OS will prompt the user whether or not they intend to run it. Similarly, if the application requires admin privs, the user is prompted to allow this. In both instances, the preference can be remembered, essentially appending to two whitelists. If the file is modified, it is removed from said whitelists and the user will be prompted again.
In linux we have a Sudoers file where we can specify files that can be run as root (Or any other user) without having to type in the password each time. This is great for applications that need to autostart with sudo permissions, especially in the case of a GUI app autostarting (With gksudo) but therein lies a security implication. If the file is modified, sudo without password ability is not removed. Is there any way to invoke this behavior?
I imagine that UAC uses file hashes to keep track of changes. I'm thinking there must be a way to handle this in Linux but I can't seem to find it as of yet.