diff --git a/definitions/.debian/sudoers.sh b/definitions/.debian/sudoers.sh
index e7673ae00..e284d8fb4 100644
--- a/definitions/.debian/sudoers.sh
+++ b/definitions/.debian/sudoers.sh
@@ -1,4 +1,4 @@
 #!/bin/bash -eux
 
-sed -i -e '/Defaults\s\+env_reset/a Defaults\texempt_group=sudo' /etc/sudoers
+sed -i -e '/Defaults\s\+env_reset/a Defaults\tsecure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"' /etc/sudoers
 sed -i -e 's/%sudo ALL=(ALL) ALL/%sudo ALL=NOPASSWD:ALL/g' /etc/sudoers