diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index fdf294ce4b..c21c0e462c 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -87,3 +87,6 @@ dev-util/checkbashisms
 
 # masked upstream due to lua dep, but we don't enable lua support
 =net-analyzer/nmap-6.40-r1
+
+# this version does not segfault when a user isn't in sudoers
+=app-admin/sudo-1.8.10_p2
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
index 85242b6b56..79f9dc8229 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
@@ -75,3 +75,6 @@ sys-libs/zlib static-libs
 dev-vcs/git -perl -iconv
 
 net-analyzer/nmap ncat -lua
+
+# removes mta dependencies
+app-admin/sudo -sendmail