"admin can sudo" dep doesn't ensure that admin can sudo

[rweng]

Problem: on a system of mine I had %admin ALL=NOPASSWD:ALL already in the sudoers file. It is ubuntu-10.04 LTS, however, modified by the hoster. The problem with the line is, that users of group admin cant use for instance sudo -u postgres, because the =(ALL) is missing.

The dependency:
dep 'admins can sudo' do requires 'admin group' met? { !sudo('cat /etc/sudoers').split("\n").grep(/^%admin/).empty? } meet { append_to_file '%admin ALL=(ALL) ALL', '/etc/sudoers', :sudo => true } end

Maybe we should grep for the entire line in met? In meet, we could let the user decide whether to overwrite the line or not. What do you think?