bryanwb/cookbooks — comment on commit 4d157277e485b6e9f0da8f588c41013addf43e11
File: sudo/templates/default/sudoers.erb line 12
By fnichol:

Any reason this is included mid-file rather than at the end? If a user is added in `/etc/sudoers.d/jdoe` with password-less sudo and they also belong to a group requiring a password, then the group line "wins" and trumps the `/etc/sudoers.d/jdoe` version.