diff --git a/mkosi/mkosi.sanitizers/mkosi.postinst b/mkosi/mkosi.sanitizers/mkosi.postinst
index 0b1a40dddb..d4d00907ed 100755
--- a/mkosi/mkosi.sanitizers/mkosi.postinst
+++ b/mkosi/mkosi.sanitizers/mkosi.postinst
@@ -62,6 +62,8 @@ wrap=(
     findmnt
     getent
     getfacl
+    groupadd
+    groupmod
     groups
     id
     integritysetup