diff --git a/build-bootloader.sh b/build-bootloader.sh
index 1b268935d..b64c8ac1c 100755
--- a/build-bootloader.sh
+++ b/build-bootloader.sh
@@ -6,7 +6,7 @@ TAG=${1:-master}
 BINFILE=build/bootloader-$TAG.bin
 
 docker build -t $IMAGE .
-docker run -t -v $(pwd)/build:/build $IMAGE /bin/sh -c "\
+docker run -t -v $(pwd)/build:/build:z $IMAGE /bin/sh -c "\
 	git clone https://github.com/trezor/trezor-mcu && \
 	cd trezor-mcu && \
 	git checkout $TAG && \
diff --git a/build-firmware.sh b/build-firmware.sh
index 0603504ae..a9a9a32cd 100755
--- a/build-firmware.sh
+++ b/build-firmware.sh
@@ -6,7 +6,7 @@ TAG=${1:-master}
 BINFILE=build/trezor-$TAG.bin
 
 docker build -t $IMAGE .
-docker run -t -v $(pwd)/build:/build $IMAGE /bin/sh -c "\
+docker run -t -v $(pwd)/build:/build:z $IMAGE /bin/sh -c "\
 	git clone https://github.com/trezor/trezor-mcu && \
 	cd trezor-mcu && \
 	git checkout $TAG && \