sudoers: set Defaults secure_path to have sane default settings

[grml-live.git] / etc / grml / fai / config / files / etc / sudoers / GRMLBASE

diff --git a/etc/grml/fai/config/files/etc/sudoers/GRMLBASE b/etc/grml/fai/config/files/etc/sudoers/GRMLBASE
index f52c892..7a46342 100644 (file)
--- a/etc/grml/fai/config/files/etc/sudoers/GRMLBASE
+++ b/etc/grml/fai/config/files/etc/sudoers/GRMLBASE
@@ -20,6 +20,9 @@ root    ALL=(ALL) ALL
 # WARNING: Never allow external access to the $USERNAME user!!!
 $USERNAME    ALL=NOPASSWD: ALL
 
+# Path used for every command run from sudo
+Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+
 # allow editing of files with editor:
 # $USERNAME ALL=NOPASSWD: sudoedit