diff --git a/ansible/roles/pds_deb/tasks/main.yml b/ansible/roles/pds_deb/tasks/main.yml
index d318356c2d7fd0a3cd2ed469407f3bc5ca794cde..dac1d4be819ccc3bfab68b2cdf3f3c7969208ccc 100644
--- a/ansible/roles/pds_deb/tasks/main.yml
+++ b/ansible/roles/pds_deb/tasks/main.yml
@@ -92,8 +92,8 @@
 - name: "sudo for ParaDiSe roots"
   lineinfile:
     path: /etc/group
-    regexp: '^(sudo:.*:)[^:]*$'
-    line: '\1:xstill,xbarnat,xrockai'
+    regexp: '^(sudo:[^:]*:[^:]*:):*[^:]*$'
+    line: '\1xstill,xbarnat,xrockai'
     backrefs: true
 
 - name: "Dev tools"