diff --git a/infra/image/shdefaults b/infra/image/shdefaults
index 86c50ab490e922b3a0412309c70c2d13561cb095..b5768cca05861ab5374b26130d0200b4ca6fcd04 100644
--- a/infra/image/shdefaults
+++ b/infra/image/shdefaults
@@ -5,4 +5,5 @@
 # Use +CAP to add the capability and -CAP to drop the capability.
 CAP_DEFAULTS=(
     "+DAC_READ_SEARCH"  # Required for SSSD
+    "+SYS_PTRACE"       # Required for debugging
 )