#!/bin/bash

set -f

function main {
	local secure_path=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/bin
	local secure_path_spec IFS=: __
	set -- $(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; echo "${ROOTPATH}")

	for __; do
		case $__ in
		''|*/gcc-bin/*|*/gnat-gcc-bin/*|*/gnat-gcc/*)
			;;
		*)
			[[ :${secure_path}: != *:"$__":* ]] && secure_path+=:$__
			;;
		esac
	done

	printf -v secure_path_spec 'Defaults secure_path="%s"\n' "${secure_path}"

	[[ -e /etc/sudoers.d/secure_path ]] && \
		grep -qxF "${secure_path_spec}" /etc/sudoers.d/secure_path 2>/dev/null && \
			return

	echo ">>> Updating /etc/sudoers.d/secure_path ..."
	echo "${secure_path_spec}" > /etc/sudoers.d/secure_path
}

main