diff --git a/docker/heka/Dockerfile.j2 b/docker/heka/Dockerfile.j2
index c4ff8fd19c..bc8db7d4e9 100644
--- a/docker/heka/Dockerfile.j2
+++ b/docker/heka/Dockerfile.j2
@@ -23,6 +23,7 @@ COPY heka_sudoers /etc/sudoers.d/heka_sudoers
 COPY extend_start.sh /usr/local/bin/kolla_extend_start
 
 RUN usermod -a -G kolla heka \
+    && chmod 440 /etc/sudoers.d/heka_sudoers \
     && chmod 755 /usr/local/bin/kolla_extend_start \
     && chown -R heka: /usr/share/heka