diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
index 17856aa324..4fa7886ad6 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
@@ -15,7 +15,7 @@ dev-vcs/git		webdav curl
 # I'm not sure we really need it.)
 # Disable websockets, we never had them, and now they are enabled by default.
 net-misc/curl		kerberos telnet -http3 -quic -curl_quic_openssl -websockets
-net-misc/iputils	arping tracepath
+net-misc/iputils	arping tracepath -suid
 sys-devel/gettext	-git
 
 # for profile migration, needs to be enabled despite the fact it's