diff --git a/sys/kern/capabilities.conf b/sys/kern/capabilities.conf
index 927f5f66d07e..d61406b2671e 100644
--- a/sys/kern/capabilities.conf
+++ b/sys/kern/capabilities.conf
@@ -132,6 +132,11 @@ closefrom
 ##
 connectat
 
+##
+## copy_file_range(2) reads from one descriptor and writes to the other.
+##
+copy_file_range
+
 ##
 ## cpuset(2) and related calls are limited to caller's own process/thread.
 ##