sudo doesn't have /snap/bin in PATH

seems that sudo by default does neither carry over the existing env nor process a pam login ...

it works fine with "sudo -i"

ogra@styx:~$ sudo -i env|grep PATH
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin

vs

ogra@styx:~$ sudo env|grep PATH
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

also note the PATH extension comes from an /etc/profile.d snipped (which sudo -i processes as it runs through the whole pam login process)

what works is:

ogra@styx:~$ sudo cat /etc/sudoers.d/foo
Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"

ogra@styx:~$ sudo env|grep PATH
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin

but you can only replace the full variable that is originally set in /etc/sudoers, just appending a dir to it via an /etc/sudoers.d/snapd snippet would not work.

Status changed to 'Confirmed' because the bug affects multiple users.

Should be fixed with:
https://github.com/snapcore/snapd/pull/1679

Closing the snapd tasks, we will fix it in sudo directly.

This bug was fixed in the package sudo - 1.8.16-0ubuntu3

---------------
sudo (1.8.16-0ubuntu3) yakkety; urgency=medium

  * debian/sudoers:
    - include /snap/bin in the secure_path (LP: #1595558)

 -- Michael Vogt <email address hidden> Mon, 15 Aug 2016 18:08:34 +0200

Hello Kyle, or anyone else affected,

Accepted sudo into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/sudo/1.8.16-0ubuntu1.2 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

The verification of the Stable Release Update for sudo has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

This bug was fixed in the package sudo - 1.8.16-0ubuntu1.2

---------------
sudo (1.8.16-0ubuntu1.2) xenial; urgency=medium

  * debian/sudoers:
    - include /snap/bin in the secure_path (LP: #1595558)

 -- Michael Vogt <email address hidden> Mon, 15 Aug 2016 18:10:18 +0200

Hello Kyle, or anyone else affected,

Accepted sudo into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/sudo/1.8.9p5-1ubuntu1.3 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

I tested this in a trusty lxc. Updated sudo to 1.8.9p5-1ubuntu1.3 and:

# mkdir -p /snap/bin
# cp $(which echo) /snap/bin/echo-test
# su ubuntu
$ sudo echo-test test
test

I'm marking it as verified. Thanks Brian.

This bug was fixed in the package sudo - 1.8.9p5-1ubuntu1.3

---------------
sudo (1.8.9p5-1ubuntu1.3) trusty-proposed; urgency=medium

  * debian/sudoers:
    - include /snap/bin in the secure_path (LP: #1595558)

 -- Michael Vogt <email address hidden> Mon, 10 Oct 2016 10:10:46 +0200