diff --git a/libglnx b/libglnx
index 900caea6..4c9055ac 160000
--- a/libglnx
+++ b/libglnx
@@ -1 +1 @@
-Subproject commit 900caea698690b18db4f2a9cd2c3abb4f84f10b5
+Subproject commit 4c9055ac08bb64dca146724f488cce4c1ce4c628
diff --git a/src/app/rpmostree-compose-builtin-tree.cxx b/src/app/rpmostree-compose-builtin-tree.cxx
index 1f4e4384..051d9bcd 100644
--- a/src/app/rpmostree-compose-builtin-tree.cxx
+++ b/src/app/rpmostree-compose-builtin-tree.cxx
@@ -1617,8 +1617,9 @@ rpmostree_compose_builtin_extensions (int             argc,
       DnfPackage *pkg = (DnfPackage*)extensions_pkgs->pdata[i];
       const char *src = dnf_package_get_filename (pkg);
       const char *basename = glnx_basename (src);
+      GLnxFileCopyFlags flags = static_cast<GLnxFileCopyFlags>(GLNX_FILE_COPY_NOXATTRS | GLNX_FILE_COPY_NOCHOWN);
       if (!glnx_file_copy_at (AT_FDCWD, dnf_package_get_filename (pkg), NULL, output_dfd,
-                              basename, GLNX_FILE_COPY_NOXATTRS, cancellable, error))
+                              basename, flags, cancellable, error))
         return FALSE;
     }
 
@@ -1654,8 +1655,9 @@ rpmostree_compose_builtin_extensions (int             argc,
       DnfPackage *pkg = (DnfPackage*)devel_pkgs_to_download->pdata[i];
       const char *src = dnf_package_get_filename (pkg);
       const char *basename = glnx_basename (src);
+      GLnxFileCopyFlags flags = static_cast<GLnxFileCopyFlags>(GLNX_FILE_COPY_NOXATTRS | GLNX_FILE_COPY_NOCHOWN);
       if (!glnx_file_copy_at (AT_FDCWD, dnf_package_get_filename (pkg), NULL, output_dfd,
-                              basename, GLNX_FILE_COPY_NOXATTRS, cancellable, error))
+                              basename, flags, cancellable, error))
         return FALSE;
     }