diff --git a/contrib/pkginstaller/Makefile b/contrib/pkginstaller/Makefile
index 82cfec94cd..f6355732ea 100644
--- a/contrib/pkginstaller/Makefile
+++ b/contrib/pkginstaller/Makefile
@@ -40,6 +40,7 @@ packagedir: podman_version package_root Distribution welcome.html
 	../../test/version/version > $(PACKAGE_DIR)/VERSION
 	echo -n $(ARCH) > $(PACKAGE_DIR)/ARCH
 	cp ../../LICENSE $(PACKAGE_DIR)/Resources/LICENSE.txt
+	cp vfkit.entitlements $(PACKAGE_DIR)/
 
 package_root: clean-pkgroot $(TMP_DOWNLOAD)/gvproxy $(TMP_DOWNLOAD)/vfkit
 	mkdir -p $(PACKAGE_ROOT)/podman/bin
diff --git a/contrib/pkginstaller/vfkit.entitlements b/contrib/pkginstaller/vfkit.entitlements
new file mode 100644
index 0000000000..3b2c941a9f
--- /dev/null
+++ b/contrib/pkginstaller/vfkit.entitlements
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.network.server</key>
+	<true/>
+	<key>com.apple.security.network.client</key>
+	<true/>
+	<key>com.apple.security.virtualization</key>
+	<true/>
+</dict>
+</plist>