diff --git a/roles/common/tasks/Debian.yml b/roles/common/tasks/Debian.yml
index 41b3ba3..24a952f 100644
--- a/roles/common/tasks/Debian.yml
+++ b/roles/common/tasks/Debian.yml
@@ -75,5 +75,5 @@
 - name: Prevent normal users from running su
   lineinfile:
     path: /etc/pam.d/su
-    regexp: '^# auth       required   pam_wheel.so$'
+    regexp: '^.*auth\s+required\s+pam_wheel.so$'
     line: 'auth       required   pam_wheel.so'