diff --git a/veilid-cli/src/main.rs b/veilid-cli/src/main.rs
index 875befa2..3fe686a4 100644
--- a/veilid-cli/src/main.rs
+++ b/veilid-cli/src/main.rs
@@ -49,6 +49,7 @@ fn parse_command_line(default_config_path: &OsStr) -> Result
com.apple.security.network.client
+ com.apple.security.files.user-selected.read-write
+
diff --git a/veilid-flutter/example/macos/Runner/Release.entitlements b/veilid-flutter/example/macos/Runner/Release.entitlements
index 64cabb4e..f8228442 100644
--- a/veilid-flutter/example/macos/Runner/Release.entitlements
+++ b/veilid-flutter/example/macos/Runner/Release.entitlements
@@ -8,5 +8,7 @@
com.apple.security.network.client
+ com.apple.security.files.user-selected.read-write
+