diff --git a/debian/aegir3-provision.lintian b/debian/aegir3-provision.lintian
index 56e06a2..876590d 100644
--- a/debian/aegir3-provision.lintian
+++ b/debian/aegir3-provision.lintian
@@ -1 +1,2 @@
 aegir3-provision: non-standard-dir-in-var var/aegir/
+aegir3-provision: non-standard-file-perm etc/sudoers.d/aegir 0440 != 0644
diff --git a/debian/aegir3-provision.postinst b/debian/aegir3-provision.postinst
index 677ceba..2c49485 100644
--- a/debian/aegir3-provision.postinst
+++ b/debian/aegir3-provision.postinst
@@ -39,15 +39,6 @@ case "$1" in
         fi
         adduser --quiet aegir www-data
 
-        if [ -d /etc/sudoers.d ]; then
-            ucf --debconf-ok /usr/share/doc/aegir3-provision/examples/example.sudoers /etc/sudoers.d/aegir
-            ucfr aegir-provision /etc/sudoers.d/aegir
-            chmod 440 /etc/sudoers.d/aegir
-        else
-            echo "running an older version of sudo"
-            echo "copy content of /usr/share/doc/aegir3-provision/examples/example.sudoers into /etc/sudoers for aegir to run properly"
-        fi
-
         # fix permissions on installed directories
         chown aegir:aegir "$VARLIB"
 
diff --git a/debian/rules b/debian/rules
index f676eec..22c2ad4 100755
--- a/debian/rules
+++ b/debian/rules
@@ -17,6 +17,9 @@ override_dh_install:
 
 	cp "$(CURDIR)/debian/aegir3-provision.lintian" "$(CURDIR)/debian/aegir3-provision/usr/share/lintian/overrides/aegir3-provision"
 
+  install -o root -g root -m 0440 example.sudoers \
+        debian/sudo/etc/sudoers.d/aegir
+
 override_dh_installinit:
 	dh_installinit --name=hosting-queued