diff --git a/rust/build.rs b/rust/build.rs
index 6e9170c..5025052 100644
--- a/rust/build.rs
+++ b/rust/build.rs
@@ -13,4 +13,9 @@ fn main() {
 
     println!("cargo:rustc-link-search={outdir}");
     println!("cargo:rustc-link-lib=static=tailscale");
+
+    #[cfg(target_os = "macos")]
+    {
+        println!("cargo:rustc-flags=-l framework=CoreFoundation -l framework=Security");
+    }
 }