diff --git a/tasks/cloud_setup_basic.yml b/tasks/cloud_setup_basic.yml
index 62fdb8e496..42e1de89ab 100644
--- a/tasks/cloud_setup_basic.yml
+++ b/tasks/cloud_setup_basic.yml
@@ -48,6 +48,9 @@
   - config
   ignore_errors: true
 
+- name: enable ssh_sysadm_login sebool
+  action: seboolean name=ssh_sysadm_login state=yes persistent=yes
+
 # note - kinda should be a handler - but handlers need args
 - name: restorecon
   action: command restorecon -R /root/.ssh