Index: head/sys/kern/capabilities.conf
===================================================================
--- head/sys/kern/capabilities.conf
+++ head/sys/kern/capabilities.conf
@@ -133,6 +133,11 @@
 connectat
 
 ##
+## copy_file_range(2) reads from one descriptor and writes to the other.
+##
+copy_file_range
+
+##
 ## cpuset(2) and related calls are limited to caller's own process/thread.
 ##
 #cpuset