diff --git a/dom0/qubes.sudoers b/dom0/qubes.sudoers
new file mode 100644
index 00000000..726b0974
--- /dev/null
+++ b/dom0/qubes.sudoers
@@ -0,0 +1 @@
+%qubes ALL=(ALL) NOPASSWD: ALL
diff --git a/rpm_spec/core-dom0.spec b/rpm_spec/core-dom0.spec
index 6ead13ef..42c61177 100644
--- a/rpm_spec/core-dom0.spec
+++ b/rpm_spec/core-dom0.spec
@@ -131,6 +131,9 @@ mkdir -p $RPM_BUILD_ROOT/var/run/qubes
 install -D ../vchan/libvchan.so $RPM_BUILD_ROOT/%{_libdir}/libvchan.so
 install -D ../u2mfn/libu2mfn.so $RPM_BUILD_ROOT/%{_libdir}/libu2mfn.so
 
+install -d $RPM_BUILD_ROOT/etc/sudoers.d
+install -m 0440 qubes.sudoers $RPM_BUILD_ROOT/etc/sudoers.d/qubes
+
 %post
 
 # Create NetworkManager configuration if we do not have it
@@ -275,3 +278,4 @@ fi
 %attr(770,root,qubes) %dir /var/run/qubes
 %{_libdir}/libvchan.so
 %{_libdir}/libu2mfn.so
+/etc/sudoers.d/qubes