diff --git a/roles/distgit/files/genacls.sh b/roles/distgit/files/genacls.sh
index 0df8df005c..26f6464fc8 100644
--- a/roles/distgit/files/genacls.sh
+++ b/roles/distgit/files/genacls.sh
@@ -7,7 +7,8 @@ cd $TEMPDIR
 # Only replace the acls if genacls completes successfully
 if /usr/local/bin/genacls.pkgdb > gitolite.conf ; then
     mv gitolite.conf /etc/gitolite/conf/
-    /usr/bin/gitolite compile
+    chown gen-acls:gen-acls -R /etc/gitolite/conf/
+    sudo -u gen-acls /usr/bin/gitolite compile
 fi
 cd /
 rm -rf $TEMPDIR