diff --git a/roles/fedmsg/base/tasks/main.yml b/roles/fedmsg/base/tasks/main.yml
index 5ec2aa1ce8..d9c859ca9c 100644
--- a/roles/fedmsg/base/tasks/main.yml
+++ b/roles/fedmsg/base/tasks/main.yml
@@ -13,15 +13,18 @@
   - packages
   - fedmsg/base
 
-# We use setgid here so that the monitoring sockets created by fedmsg services
-# are accessible to the nrpe group.
+# We only need this on el6.  On el7, the fedmsg package uses systemd-tempfiles
+# to generate this effect for us.  Note that at the bottom of this role we add
+# the nrpe user to the fedmsg group so that it has *write* permissions to a unix
+# socket in this dir.
 - name: create a /var/run/fedmsg dir with setgid for monitoring.
   file: >
     dest=/var/run/fedmsg
     mode=2775
     owner=fedmsg
-    group=nrpe
+    group=fedmsg
     state=directory
+  when: ansible_distribution_major_version != '7'
   tags:
   - fedmsg/base