diff --git a/sdk_container/src/third_party/coreos-overlay/sys-auth/sssd/files/tmpfiles.d/sssd.conf b/sdk_container/src/third_party/coreos-overlay/sys-auth/sssd/files/tmpfiles.d/sssd.conf
index 51acd3968f..9af4dc97ec 100644
--- a/sdk_container/src/third_party/coreos-overlay/sys-auth/sssd/files/tmpfiles.d/sssd.conf
+++ b/sdk_container/src/third_party/coreos-overlay/sys-auth/sssd/files/tmpfiles.d/sssd.conf
@@ -1,2 +1,10 @@
 d /etc/sssd	0700	root	root	-	-
 C /etc/sssd/sssd.conf	0600	root	root	-	/usr/share/sssd/sssd-example.conf
+d /var/log/sssd 0700	root	root	-	-
+d /var/lib/sss	0700	root	root	-	-
+d /var/lib/sss/pipes	0700	root	root	-	-
+d /var/lib/sss/pipes/private	0700	root	root	-	-
+d /var/lib/sss/mc	0700	root	root	-	-
+d /var/lib/sss/db	0700	root	root	-	-
+d /var/lib/sss/pubconf	0700	root	root	-	-
+d /var/lib/sss/pubconf/krb5.include.d	0700	root	root	-	-