diff --git a/instack_undercloud/undercloud.py b/instack_undercloud/undercloud.py
index aad700661..a3bed159d 100644
--- a/instack_undercloud/undercloud.py
+++ b/instack_undercloud/undercloud.py
@@ -1662,7 +1662,7 @@ def _ensure_ssh_selinux_permission():
                         wrong_perm = True
                         break
                 if wrong_perm:
-                    cmd = ['semanage',
+                    cmd = ['sudo', 'semanage',
                            'fcontext', '-a', '-t', 'ssh_home_t',
                            "{}(/.*)?".format(ssh_path)]
                     _run_command(cmd)