diff --git a/recipes-support/libgcrypt/libgcrypt_%.bbappend b/recipes-support/libgcrypt/libgcrypt_%.bbappend
new file mode 100644
index 0000000..2435dbb
--- /dev/null
+++ b/recipes-support/libgcrypt/libgcrypt_%.bbappend
@@ -0,0 +1,4 @@
+# Capability dropping is a Linux-only concept; libcap has no Darwin port
+# and can't build for it (uses sys/prctl.h, byteswap.h, priority-numbered
+# constructors, none of which exist on Mach-O/Darwin).
+PACKAGECONFIG:remove:class-nativesdk:darwin21 = "capabilities"
