Working post-update script that updates secure_path (V5)

99update-secure-path (text/plain), 762 bytes, created by konsolebox on 2021-03-21 14:25:32 UTC

#!/bin/bash

set -f

function main {
	local secure_path=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/bin
	local IFS=: __
	set -- $(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; echo "${ROOTPATH}")

	for __; do
		case $__ in
		''|*/gcc-bin/*|*/gnat-gcc-bin/*|*/gnat-gcc/*)
			;;
		*)
			[[ :${secure_path}: != *:"$__":* ]] && secure_path+=:$__
			;;
		esac
	done

	local secure_path_file=${EPREFIX}/etc/sudoers.d/secure_path secure_path_spec
	printf -v secure_path_spec 'Defaults secure_path="%s"' "${secure_path}"

	[[ -e ${secure_path_file} ]] && \
		grep -qxF "${secure_path_spec}" "${secure_path_file}" 2>/dev/null && \
			return

	echo ">>> Updating ${secure_path_file} ..."
	echo "${secure_path_spec}" > "${secure_path_file}"
}

main