diff --git a/RTCP/Cobalt/OutputProc/etc/sudoers.d/setcap_cobalt b/RTCP/Cobalt/OutputProc/etc/sudoers.d/setcap_cobalt
index 97ab165568503bb77a5c1a584eeb57f19a477dda..df16728cb6d223498df74d22d76e50992766e2ab 100644
--- a/RTCP/Cobalt/OutputProc/etc/sudoers.d/setcap_cobalt
+++ b/RTCP/Cobalt/OutputProc/etc/sudoers.d/setcap_cobalt
@@ -1,5 +1,5 @@
 ## Allows lofarbuild to add the listed capabilities to any single writable file for automated roll-out.
 ## Attempts to disallow adding another set of capabilities.
 ## Does not attempt to disallow adding the listed capabilities to other files, which would be trivial to bypass.
-Cmnd_Alias SETCAP_COBALT = /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock+ep *, ! /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock+ep * *
+Cmnd_Alias SETCAP_COBALT = /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock=ep *, ! /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock=ep * *
 lofarbuild ALL = (root) NOPASSWD: SETCAP_COBALT