diff --git a/CHANGELOG.md b/CHANGELOG.md
index 697558e6..c7f5932d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -23,6 +23,9 @@
 - replace `Subject` with `[...]` for all outgoing mails.
   ([#481](https://github.com/deltachat/chatmail/pull/481))
 
+- opendkim: use su instead of sudo
+  ([#491](https://github.com/deltachat/chatmail/pull/491))
+
 ## 1.5.0 2024-12-20
 
 - cmdeploy dns: always show recommended DNS records
diff --git a/cmdeploy/src/cmdeploy/__init__.py b/cmdeploy/src/cmdeploy/__init__.py
index 783a5405..3454086e 100644
--- a/cmdeploy/src/cmdeploy/__init__.py
+++ b/cmdeploy/src/cmdeploy/__init__.py
@@ -217,8 +217,8 @@ def _configure_opendkim(domain: str, dkim_selector: str = "dkim") -> bool:
             commands=[
                 f"opendkim-genkey -D /etc/dkimkeys -d {domain} -s {dkim_selector}"
             ],
-            _sudo=True,
-            _sudo_user="opendkim",
+            _use_su_login=True,
+            _su_user="opendkim",
         )
 
     return need_restart