diff --git a/mock/py/mockbuild/plugins/chroot_scan.py b/mock/py/mockbuild/plugins/chroot_scan.py
index fec278dd4..49247013e 100644
--- a/mock/py/mockbuild/plugins/chroot_scan.py
+++ b/mock/py/mockbuild/plugins/chroot_scan.py
@@ -90,3 +90,4 @@ def __scanChroot(self):
                     shell=False, printOutput=True
                 )
                 shutil.rmtree(self.resultdir)
+                self.buildroot.uid_manager.changeOwner(tarfile)
diff --git a/releng/release-notes-next/chroot-scan-permissions.bugfix b/releng/release-notes-next/chroot-scan-permissions.bugfix
new file mode 100644
index 000000000..ef97387b3
--- /dev/null
+++ b/releng/release-notes-next/chroot-scan-permissions.bugfix
@@ -0,0 +1,2 @@
+The ownership of the `chroot_scan` plugin "output tarball" (when `write_tar =
+True`) has been corrected, ensuring the file is no longer root-owned.