diff --git a/scripts/update.sh b/scripts/update.sh
index f113b72..74c1dac 100644
--- a/scripts/update.sh
+++ b/scripts/update.sh
@@ -299,6 +299,9 @@ exec > >(tee -a "$LOG_FILE") 2>&1
 git_safe
 git_dirty_check
 
+# Sbin + Sudoers immer aktuell halten — unabhängig vom Update-Pfad
+ensure_system
+
 # -------- Git: neuen Stand holen ---------------------------------------------
 echo "[i] Prüfe Repository …"
 OLD_REV="$(git -C "${APP_DIR}" rev-parse HEAD)"