diff --git a/microdroid/Android.bp b/microdroid/Android.bp
index 2b8e03f..8cc8daf 100644
--- a/microdroid/Android.bp
+++ b/microdroid/Android.bp
@@ -89,6 +89,8 @@
         "liblzma", // used by init_second_stage
 
         "libvm_payload", // used by payload to interact with microdroid manager
+
+        "prng_seeder",
     ] + microdroid_shell_and_utilities,
     multilib: {
         common: {
diff --git a/microdroid/ueventd.rc b/microdroid/ueventd.rc
index 268d3a2..0c5fbfc 100644
--- a/microdroid/ueventd.rc
+++ b/microdroid/ueventd.rc
@@ -29,3 +29,6 @@
 /dev/hvc2                 0666   system     system
 
 /dev/open-dice0           0660   root       root
+
+# Aside from kernel threads, only prng_seeder needs access to HW RNG
+/dev/hw_random            0400   prng_seeder prng_seeder