diff --git a/sandbox.c b/sandbox.c
index cf6ee8b..9958c64 100644
--- a/sandbox.c
+++ b/sandbox.c
@@ -179,6 +179,9 @@ sandbox()
 		/* alpine on amd64 does a clock_gettime(2) */
 		SC_ALLOW(clock_gettime),
 
+		/* void on aarch64 does a gettrandom */
+		SC_ALLOW(getrandom),
+
 		/* for directory listing */
 		SC_ALLOW(getdents64),