site/profiles/manifests/base.pp

@@ -32,7 +32,9 @@ class profiles::base (
   }
 
   # all hosts will have sudo applied
-  include sudo
+  class { 'sudo':
+    secure_path => '/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/opt/puppetlabs/bin'
+  }
 
   # default users
   include profiles::accounts::sysadmin