diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
index 13e31197c6..55090c3fca 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
@@ -193,7 +193,7 @@ sys-apps/gawk -mpfr
 
 # We never had passwdqc stuff in old pam sys configs, so disable it
 # for now. Maybe this is something to enable later.
-sys-auth/pambase securetty -passwdqc
+sys-auth/pambase securetty -passwdqc sssd
 
 # We run the server in a container.
 dev-db/etcd -server