diff --git a/create_legacy_bootloader_templates.sh b/create_legacy_bootloader_templates.sh
index e0f2bfcb01..179dc3d844 100755
--- a/create_legacy_bootloader_templates.sh
+++ b/create_legacy_bootloader_templates.sh
@@ -194,7 +194,8 @@ menuentry "Alternate USB Boot" {
 }
 EOF
   if [[ ${FLAGS_use_vboot} -eq ${FLAGS_TRUE} ]]; then
-    sed -i -e 's/^set default=.*/set default=2/' "${FLAGS_to}/efi/boot/grub.cfg"
+    sudo sed -i -e 's/^set default=.*/set default=2/' \
+        "${FLAGS_to}/efi/boot/grub.cfg"
   fi
   info "Emitted ${FLAGS_to}/efi/boot/grub.cfg"
   exit 0