diff --git a/profiles/pentoo/arch/arm/package.accept_keywords/forensics b/profiles/pentoo/arch/arm/package.accept_keywords/forensics
index 201bc156a..de8b71874 100644
--- a/profiles/pentoo/arch/arm/package.accept_keywords/forensics
+++ b/profiles/pentoo/arch/arm/package.accept_keywords/forensics
@@ -29,5 +29,4 @@
 =app-forensics/libvshadow-0.0.20130509_alpha **
 =app-forensics/libewf-20130416 **
 =dev-ruby/ruby-gio2-1.2.6 **
-=app-admin/testdisk-6.13 **
 
diff --git a/profiles/pentoo/base/package.use.mask b/profiles/pentoo/base/package.use.mask
index a70cd7b02..f35028d55 100644
--- a/profiles/pentoo/base/package.use.mask
+++ b/profiles/pentoo/base/package.use.mask
@@ -41,3 +41,5 @@ app-emulation/wine-vanilla opencl
 #for any/all packages which don't actually depend on deprecated xf86-video-intel driver
 #modesetting is superior in all noticable ways and it default nearly everywhere
 x11-base/xorg-drivers video_cards_i915
+
+app-admin/testdisk -ewf
diff --git a/profiles/pentoo/base/package.use/app-admin b/profiles/pentoo/base/package.use/app-admin
index 04cd491c3..91e053002 100644
--- a/profiles/pentoo/base/package.use/app-admin
+++ b/profiles/pentoo/base/package.use/app-admin
@@ -1,2 +1,2 @@
 app-admin/sudo offensive
-app-admin/testdisk ntfs
+app-admin/testdisk ntfs ewf
diff --git a/profiles/pentoo/overlay/package.use.mask b/profiles/pentoo/overlay/package.use.mask
new file mode 120000
index 000000000..94a797d3b
--- /dev/null
+++ b/profiles/pentoo/overlay/package.use.mask
@@ -0,0 +1 @@
+../base/package.use.mask
\ No newline at end of file