diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults
index 4eb34f192b..fa646a530f 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults
@@ -3,9 +3,10 @@
 
 # Restrictive mask for production images.
 INSTALL_MASK="${INSTALL_MASK}
-  *.a *.la *.h *.hpp *.o
+  *.a *.la *.hpp *.o
   /etc/sandbox.d
   /usr/include
+  /usr/lib*/*/include
   /usr/lib/debug
   /usr/lib*/pkgconfig
   /usr/share/aclocal*
@@ -25,8 +26,3 @@ INSTALL_MASK="${INSTALL_MASK}
   /usr/share/ncat
   /usr/share/nmap
 "
-
-# These kernel paths are just noise without sources
-INSTALL_MASK="${INSTALL_MASK}
-  /usr/lib/modules/*/{build,source}
-"