diff --git a/bind.spec b/bind.spec
index b6b43cd..90d8640 100644
--- a/bind.spec
+++ b/bind.spec
@@ -1282,6 +1282,7 @@ rm -rf ${RPM_BUILD_ROOT}
 %defattr(0664,root,named,-)
 %ghost %dev(c,1,3) %verify(not mtime) %{chroot_prefix}/dev/null
 %ghost %dev(c,1,8) %verify(not mtime) %{chroot_prefix}/dev/random
+%ghost %dev(c,1,9) %verify(not mtime) %{chroot_prefix}/dev/urandom
 %ghost %dev(c,1,5) %verify(not mtime) %{chroot_prefix}/dev/zero
 %defattr(0640,root,named,0750)
 %dir %{chroot_prefix}
@@ -1317,6 +1318,7 @@ rm -rf ${RPM_BUILD_ROOT}
 %defattr(0664,root,named,-)
 %ghost %dev(c,1,3) %verify(not mtime) %{chroot_sdb_prefix}/dev/null
 %ghost %dev(c,1,8) %verify(not mtime) %{chroot_sdb_prefix}/dev/random
+%ghost %dev(c,1,9) %verify(not mtime) %{chroot_sdb_prefix}/dev/urandom
 %ghost %dev(c,1,5) %verify(not mtime) %{chroot_sdb_prefix}/dev/zero
 %defattr(0640,root,named,0750)
 %dir %{chroot_sdb_prefix}
@@ -1440,6 +1442,7 @@ rm -rf ${RPM_BUILD_ROOT}
 %changelog
 * Thu Sep 20 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2
 - Update to bind-9.11.4-P2
+- Add /dev/urandom to chroot (#1631515)
 
 * Fri Aug 24 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P1
 - Replace unoptimized code by OpenSSL counterparts
diff --git a/setup-named-chroot.sh b/setup-named-chroot.sh
index 28134f5..5e68915 100755
--- a/setup-named-chroot.sh
+++ b/setup-named-chroot.sh
@@ -44,9 +44,10 @@ dev_create()
 
 dev_chroot_prep()
 {
-  dev_create random c 1 8
-  dev_create zero   c 1 5
-  dev_create null   c 1 3
+  dev_create random  c 1 8
+  dev_create urandom c 1 9
+  dev_create zero    c 1 5
+  dev_create null    c 1 3
 }
 
 files_comment_filter()