diff --git a/debian/security-misc.postinst b/debian/security-misc.postinst
index f72ca7a..b81a641 100644
--- a/debian/security-misc.postinst
+++ b/debian/security-misc.postinst
@@ -35,6 +35,8 @@ addgroup --system console
 addgroup --system console-unrestricted
 addgroup --system ssh
 
+## group 'sudo' membership required to use 'su'
+## /usr/share/pam-configs/wheel-security-misc
 addgroup root sudo
 
 ## Related to Console Lockdown.