diff -rupN a/packetfence.postinst b/packetfence.postinst
--- a/packetfence.postinst	2013-07-29 14:35:55.493364228 -0500
+++ b/packetfence.postinst	2013-07-29 14:48:06.181467014 -0500
@@ -94,11 +94,16 @@ case "$1" in
             # Comment out entry from a previous version of PF (< 4.0)
             sed -i 's/^\(pf ALL=NOPASSWD:.*\/sbin\/iptables.*\/usr\/sbin\/ipset\)/#\1/g' /etc/sudoers
         fi
-        if ! (grep "^pf ALL=NOPASSWD:.*/sbin/iptables.*/usr/sbin/ipset.*/sbin/ip.*/sbin/vconfig.*/sbin/route.*/usr/bin/service.*/usr/bin/tee.*/usr/local/pf/sbin/pfdhcplistener.*/bin/kill.*/usr/sbin/dhcpd.*/usr/sbin/freeradius.*/usr/sbin/snort.*/usr/bin/suricata" /etc/sudoers > /dev/null  ) ; then
-            echo "pf ALL=NOPASSWD: /sbin/iptables, /usr/sbin/ipset, /sbin/ip, /sbin/vconfig, /sbin/route, /usr/sbin/service, /usr/bin/tee, /usr/local/pf/sbin/pfdhcplistener, /bin/kill, /usr/sbin/dhcpd, /usr/sbin/freeradius, /usr/sbin/snort, /usr/bin/suricata" >> /etc/sudoers
+        SUDO_FILE=/etc/sudoers.d/packetfence
+        if [ ! -f $SUDO_FILE ]; then
+            touch $SUDO_FILE
+            chmod 0440 $SUDO_FILE
         fi
-        if ! ( grep '^Defaults:pf.*!requiretty' /etc/sudoers > /dev/null ) ; then
-            echo 'Defaults:pf !requiretty' >> /etc/sudoers
+        if ! (grep -q "^pf ALL=NOPASSWD:.*/sbin/iptables.*/usr/sbin/ipset.*/sbin/ip.*/sbin/vconfig.*/sbin/route.*/usr/bin/service.*/usr/bin/tee.*/usr/local/pf/sbin/pfdhcplistener.*/bin/kill.*/usr/sbin/dhcpd.*/usr/sbin/freeradius.*/usr/sbin/snort.*/usr/bin/suricata" $SUDO_FILE ) ; then
+            echo "pf ALL=NOPASSWD: /sbin/iptables, /usr/sbin/ipset, /sbin/ip, /sbin/vconfig, /sbin/route, /usr/sbin/service, /usr/bin/tee, /usr/local/pf/sbin/pfdhcplistener, /bin/kill, /usr/sbin/dhcpd, /usr/sbin/freeradius, /usr/sbin/snort, /usr/bin/suricata" >> $SUDO_FILE
+        fi
+        if ! ( grep -q '^Defaults:pf.*!requiretty' $SUDO_FILE ) ; then
+            echo 'Defaults:pf !requiretty' >> $SUDO_FILE
         fi
 
         update-rc.d packetfence defaults 60 || exit 0
