diff --git a/ISOconfig.sh b/ISOconfig.sh
index 0dd876a..41e599c 100755
--- a/ISOconfig.sh
+++ b/ISOconfig.sh
@@ -267,8 +267,13 @@ ipfs bootstrap rm --all
 # AVOID CONFLICT WITH KODI REMOTE
 ipfs config Addresses.Gateway "/ip4/127.0.0.1/tcp/8181"
 
-# RESTRICT $USER NOPASSWD sudo to fail2ban-client ONLY
+# sudo $USER NOPASSWD FOR fail2ban-client (DEFCON) mount umount (RAM disk) apt-get (INSTALL UPDATE)
 echo "$USER ALL=(ALL) NOPASSWD:/usr/bin/fail2ban-client" | (sudo su -c 'EDITOR="tee" visudo -f /etc/sudoers.d/fail2ban-client')
+echo "$USER ALL=(ALL) NOPASSWD:/bin/mount" | (sudo su -c 'EDITOR="tee" visudo -f /etc/sudoers.d/mount')
+echo "$USER ALL=(ALL) NOPASSWD:/bin/umount" | (sudo su -c 'EDITOR="tee" visudo -f /etc/sudoers.d/umount')
+echo "$USER ALL=(ALL) NOPASSWD:/usr/bin/apt-get" | (sudo su -c 'EDITOR="tee" visudo -f /etc/sudoers.d/apt-get')
+echo "$USER ALL=(ALL) NOPASSWD:/usr/bin/apt" | (sudo su -c 'EDITOR="tee" visudo -f /etc/sudoers.d/apt')
+
 
 ## INSTALL TiddlyWiki
 [[ ! -f ~/.zen/ipfs/.${IPFSNODEID}/index.html ]] && mkdir -p ~/.zen/ipfs/.${IPFSNODEID} && cp ~/.zen/astrXbian/.install/templates/tiddlywiki/index.html ~/.zen/ipfs/.${IPFSNODEID}/index.html