Merge pull request #70 from jamesonjlee/master

[BENTO-80] Sudoers should use secure_path by default
chef · Aug 13, 2013 · 2834be3 · 2834be3
2 parents 7e258be + aeb94c9
commit 2834be3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/definitions/.debian/sudoers.sh b/definitions/.debian/sudoers.sh
@@ -1,4 +1,4 @@
 #!/bin/bash -eux
 
-sed -i -e '/Defaults\s\+env_reset/a Defaults\texempt_group=sudo' /etc/sudoers
+sed -i -e '/Defaults\s\+env_reset/a Defaults\tsecure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"' /etc/sudoers
 sed -i -e 's/%sudo ALL=(ALL) ALL/%sudo ALL=NOPASSWD:ALL/g' /etc/sudoers