diff --git a/roles/bkernel/tasks/main.yml b/roles/bkernel/tasks/main.yml
index 6be00533ee..a363a75f5b 100644
--- a/roles/bkernel/tasks/main.yml
+++ b/roles/bkernel/tasks/main.yml
@@ -29,3 +29,9 @@
 
 - name: make sure our bkernel boxes have static ip
   template: src=bkernel-eth0-network dest=/etc/sysconfig/network-scripts/ifcfg-eth0 
+
+- name: set pesign facls to allow mockbuild user to use the socket directory 
+  acl: name=/var/run/pesign entity=kojibuilder etype=user permissions='rx'
+
+- name: set pesign facls to allow mockbuild user to use the socket. 
+  acl: name=/var/run/pesign/socket entity=kojibuilder etype=user permissions='rw'