diff --git a/site/profiles/manifests/base.pp b/site/profiles/manifests/base.pp
index 23c0746..0f40f27 100644
--- a/site/profiles/manifests/base.pp
+++ b/site/profiles/manifests/base.pp
@@ -32,7 +32,9 @@ class profiles::base (
   }
 
   # all hosts will have sudo applied
-  include sudo
+  class { 'sudo':
+    secure_path => '/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/opt/puppetlabs/bin'
+  }
 
   # default users
   include profiles::accounts::sysadmin