diff --git a/infra/image/shdefaults b/infra/image/shdefaults
index 86c50ab4..b5768cca 100644
--- a/infra/image/shdefaults
+++ b/infra/image/shdefaults
@@ -5,4 +5,5 @@
 # Use +CAP to add the capability and -CAP to drop the capability.
 CAP_DEFAULTS=(
     "+DAC_READ_SEARCH"  # Required for SSSD
+    "+SYS_PTRACE"       # Required for debugging
 )