# Allow the unprivileged RepoGoon service to invoke only the root-owned channel helper.
repogoon ALL=(root) NOPASSWD: /usr/libexec/repogoon-update-channel stable
repogoon ALL=(root) NOPASSWD: /usr/libexec/repogoon-update-channel preview
repogoon ALL=(root) NOPASSWD: /usr/libexec/repogoon-update-channel apply
