diff --git a/postlfs/security/sudo.xml b/postlfs/security/sudo.xml
index 58c268caf7..85c66b2111 100644
--- a/postlfs/security/sudo.xml
+++ b/postlfs/security/sudo.xml
@@ -104,6 +104,7 @@
 is written otherwise           -disable-static           \-->
 <screen><userinput>./configure --prefix=/usr              \
             --libexecdir=/usr/lib      \
+            --with-secure-path         \
             --with-all-insults         \
             --with-env-editor          \
             --docdir=/usr/share/doc/sudo-&sudo-version; \
@@ -134,6 +135,13 @@ make</userinput></screen>
      <filename class="directory">/usr/libexec</filename>.
     </para>
 
+    <para>
+      <parameter>--with-secure-path</parameter>: This switch transparently adds
+      <filename class="directory">/sbin</filename> and <filename
+      class="directory">/usr/sbin</filename> directories to the
+      <envar>PATH</envar> environment variable.
+    </para>
+
     <para>
       <parameter>--with-all-insults</parameter>: This switch includes all the
       <application>sudo</application> insult sets.