diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/make.defaults
index 303236e1f0..ebc8533f3d 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/make.defaults
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/make.defaults
@@ -18,3 +18,21 @@ INSTALL_MASK="${INSTALL_MASK}
   /usr/share/i18n
   /usr/share/locale
 "
+
+# Restrictive mask for production images.
+# TODO(marineam): Perhaps later move this to a generic/production profile.
+PROD_INSTALL_MASK="${INSTALL_MASK}
+  *.a *.la *.h *.hpp
+  /usr/lib/debug
+  /usr/lib*/pkgconfig
+  /usr/share/aclocal*
+  /usr/share/awk
+  /usr/share/doc
+  /usr/share/gdb
+  /usr/share/gettext
+  /usr/share/gobject-introspection-1.0
+  /usr/share/gtk-doc
+  /usr/share/pkgconfig
+  /usr/share/readline
+  /usr/src
+"