diff --git a/roles/batcave/files/zabbix-ssh-list.cron b/roles/batcave/files/zabbix-ssh-list.cron
index 7abf5d6ee8..d565e80f96 100755
--- a/roles/batcave/files/zabbix-ssh-list.cron
+++ b/roles/batcave/files/zabbix-ssh-list.cron
@@ -11,6 +11,8 @@ TMP_FILE=$(mktemp)
 if [ -s "$TMP_FILE" ]; then
     mv "$TMP_FILE" /etc/zabbix/ssh-targets.txt
     chmod 644 /etc/zabbix/ssh-targets.txt
+    # creating and moving a file breaks selinux, so set it to match a file the agent can already read
+    chcon --reference=/etc/zabbix/fedora.psk /etc/zabbix/ssh-targets.txt
 else
     rm -f "$TMP_FILE"
 fi