diff --git a/src/lxc/lxc_controller.c b/src/lxc/lxc_controller.c
index dbb053a6ebd2ff396e1460d9529e3e41412bde0d..ce1f941c5a8bd9bc664b40b6d8342f5f06b4b4c8 100644
--- a/src/lxc/lxc_controller.c
+++ b/src/lxc/lxc_controller.c
@@ -1348,6 +1348,9 @@ virLXCControllerSetupHostdevSubsysUSB(virDomainDefPtr vmDef,
         goto cleanup;
     }
 
+    if (lxcContainerChown(vmDef, dstfile) < 0)
+        goto cleanup;
+
     if (virSecurityManagerSetHostdevLabel(securityDriver,
                                           vmDef, def, vroot) < 0)
         goto cleanup;
@@ -1425,6 +1428,9 @@ virLXCControllerSetupHostdevCapsStorage(virDomainDefPtr vmDef,
         goto cleanup;
     }
 
+    if (lxcContainerChown(vmDef, dst) < 0)
+        goto cleanup;
+
     def->source.caps.u.storage.block = dst;
     if (virSecurityManagerSetHostdevLabel(securityDriver, vmDef, def, NULL) < 0)
         goto cleanup;
@@ -1501,6 +1507,9 @@ virLXCControllerSetupHostdevCapsMisc(virDomainDefPtr vmDef,
         goto cleanup;
     }
 
+    if (lxcContainerChown(vmDef, dst) < 0)
+        goto cleanup;
+
     def->source.caps.u.misc.chardev = dst;
     if (virSecurityManagerSetHostdevLabel(securityDriver, vmDef, def, NULL) < 0)
         goto cleanup;