usermod appears to use $PATH to locate passmgmt. Shouldn't it really use a full pathname to invoke it?
I know it's not suid, but I'm thinking if given permissions via rbac, there might be an issue. Can anyone confirm if I'm on to something or just off my rocker?
