%lfs-updates ALL=(root) NOPASSWD: /usr/bin/rpm, /usr/bin/ldconfig, /usr/bin/update-initrd
