diff --git a/instack_undercloud/undercloud.py b/instack_undercloud/undercloud.py
index c7517d4c5..ee6dbb51f 100644
--- a/instack_undercloud/undercloud.py
+++ b/instack_undercloud/undercloud.py
@@ -1675,7 +1675,7 @@ def _ensure_ssh_selinux_permission():
                         wrong_perm = True
                         break
                 if wrong_perm:
-                    cmd = ['semanage',
+                    cmd = ['sudo', 'semanage',
                            'fcontext', '-a', '-t', 'ssh_home_t',
                            "{}(/.*)?".format(ssh_path)]
                     _run_command(cmd)