#1141402 sudo: removal of /usr/local dirs from secure_path breaks existing config/scripts

Package:
sudo
Source:
sudo
Description:
Provide limited super user privileges to specific users
Submitter:
astian
Date:
2026-08-04 05:31:03 UTC
Severity:
normal
Tags:
#1141402#5
Date:
2026-07-03 23:10:37 UTC
From:
To:
Dear Maintainer,

changelog.Debian.gz says:

  sudo (1.9.17p2-6) unstable; urgency=medium
    [...]
    * align /etc/sudoers with what upstream ships.

This changed the secure_path setting from:

  Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

...to:

  Defaults secure_path="/usr/sbin:/usr/bin:/sbin:/bin"

Removing the /usr/local directories, which broke my configuration
(moreover, it broke it during or right after upgrade because my APT
configuration depended on some executables there).

Things work again after re-adding those directories.
#1141402#10
Date:
2026-07-04 11:04:00 UTC
From:
To:
Hello,

Bug #1141402 in sudo reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/sudo-team/sudo/-/commit/92b9d4fae6e1f70645592476c48bd6a92428db1d
------------------------------------------------------------------------
Mention in NEWS that secure_path was shortened

Closes: #1141402
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1141402
#1141402#17
Date:
2026-07-09 21:13:55 UTC
From:
To:
This started already with -6.
#1141402#22
Date:
2026-07-09 21:13:55 UTC
From:
To:
This started already with -6.
#1141402#25
Date:
2026-07-09 21:13:55 UTC
From:
To:
This started already with -6.
#1141402#30
Date:
2026-07-10 14:11:11 UTC
From:
To:
Thanks for proofreading, fixed.

Greetings
Marc
#1141402#35
Date:
2026-07-10 14:11:11 UTC
From:
To:
Thanks for proofreading, fixed.

Greetings
Marc
#1141402#38
Date:
2026-07-10 14:11:11 UTC
From:
To:
Thanks for proofreading, fixed.

Greetings
Marc
#1141402#41
Date:
2026-08-04 05:30:56 UTC
From:
To:
Hello,

Bug #1141402 in sudo reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/sudo-team/sudo/-/commit/92b9d4fae6e1f70645592476c48bd6a92428db1d
------------------------------------------------------------------------
Mention in NEWS that secure_path was shortened

Closes: #1141402
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1141402