Working post-update script that updates secure_path (V2)

99update-secure-path (text/plain), 689 bytes, created by konsolebox on 2021-03-21 10:45:22 UTC

#!/bin/bash

set -f

function main {
	local extra_path=$(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; echo "${ROOTPATH}")

	if [[ ${extra_path} != */usr/sbin* ]]; then
		extra_path=$(unset PATH; . "${EPREFIX}"/etc/profile.env; echo "${PATH}")
	fi

	local IFS=: __
	set -- ${extra_path}

	local secure_path=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/bin

	for __; do
		case $__ in
		''|*/gcc-bin/*|*/gnat-gcc-bin/*|*/gnat-gcc/*)
			;;
		*)
			[[ :${secure_path}: != *:"$__":* ]] && secure_path+=:$__
			;;
		esac
	done

	echo ">>> Updating /etc/sudoers.d/secure_path ..."
	printf 'Defaults secure_path="%s"\n' "${secure_path}" > /etc/sudoers.d/secure_path
}

main