add missing permission for su