From 86a6c1bd96b9c38a0e8d4dcc7f65e0ddb9052ec8 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sat, 21 Oct 2023 23:52:48 +1100
Subject: [PATCH] feat: add sudo secure_path

- update the sudo class from an include to a definition
- set the secure_path variable to include /usr/local/{bin,sbin}
---
 site/profiles/manifests/base.pp | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/site/profiles/manifests/base.pp b/site/profiles/manifests/base.pp
index 23c0746..0f40f27 100644
--- a/site/profiles/manifests/base.pp
+++ b/site/profiles/manifests/base.pp
@@ -32,7 +32,9 @@ class profiles::base (
   }
 
   # all hosts will have sudo applied
-  include sudo
+  class { 'sudo':
+    secure_path => '/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/opt/puppetlabs/bin'
+  }
 
   # default users
   include profiles::accounts::sysadmin