diff --git a/roles/basessh/tasks/main.yml b/roles/basessh/tasks/main.yml
index 3b8166aeb5..b64a9d52aa 100644
--- a/roles/basessh/tasks/main.yml
+++ b/roles/basessh/tasks/main.yml
@@ -33,6 +33,17 @@
   - config
   - sshd
   - selinux
+  when: ansible_distribution_major_version|int != 8
+
+- name: make sure libselinux-python is installed
+  package: name=python3-libselinux state=present
+  tags:
+  - basessh
+  - sshd_config
+  - config
+  - sshd
+  - selinux
+  when: ansible_distribution_major_version|int == 8
 
 - name: check if sshd port is already known by selinux
   shell: semanage port -l | grep ssh