diff --git a/sys/compat/freebsd32/capabilities.conf b/sys/compat/freebsd32/capabilities.conf
index 06a089ca68bf..532597486fa8 100644
--- a/sys/compat/freebsd32/capabilities.conf
+++ b/sys/compat/freebsd32/capabilities.conf
@@ -134,6 +134,7 @@ getpgrp
 getpid
 getppid
 getpriority
+getrandom
 getresgid
 getresuid
 getrlimit
diff --git a/sys/kern/capabilities.conf b/sys/kern/capabilities.conf
index b0020c2f5706..7857d0862295 100644
--- a/sys/kern/capabilities.conf
+++ b/sys/kern/capabilities.conf
@@ -307,6 +307,11 @@ getrlimit
 getrusage
 getsid
 
+##
+## Allow getrandom
+##
+getrandom
+
 ##
 ## Allow querying socket state, subject to capability rights.
 ##