diff --git a/scripts/image_signing/set_chronos_password.sh b/scripts/image_signing/set_chronos_password.sh
index f1b1ac380d..ff71e45867 100755
--- a/scripts/image_signing/set_chronos_password.sh
+++ b/scripts/image_signing/set_chronos_password.sh
@@ -19,7 +19,7 @@ change_chronos_password() {
   local temp_shadow="$rootfs/etc/tempshadow"
   echo "chronos:$crypted_password:14500:0:99999::::" \
     | sudo tee "$temp_shadow" > /dev/null
-  grep -Ev ^chronos: "$rootfs/etc/shadow" \
+  sudo grep -Ev ^chronos: "$rootfs/etc/shadow" \
     | sudo tee -a "$temp_shadow" > /dev/null
   sudo mv -f "$temp_shadow" "$rootfs/etc/shadow"
 }