diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/default/linux/package.mask b/sdk_container/src/third_party/coreos-overlay/profiles/default/linux/package.mask
index 355fd5012f..7718ea7fcd 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/default/linux/package.mask
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/default/linux/package.mask
@@ -19,4 +19,4 @@ coreos-base/efunctions
 
 # There is a "new" sdk toolchain, which can properly build kexec-tools,
 # so mask the "binary" ebuild.
-sys-apps/kexec-tools-2.0.99
+=sys-apps/kexec-tools-2.0.99