diff --git a/Userland/Utilities/ntpquery.cpp b/Userland/Utilities/ntpquery.cpp
index d45051f4a5..d3aff6049a 100644
--- a/Userland/Utilities/ntpquery.cpp
+++ b/Userland/Utilities/ntpquery.cpp
@@ -92,7 +92,10 @@ static String format_ntp_timestamp(NtpTimestamp ntp_timestamp)
 }
 ErrorOr<int> serenity_main(Main::Arguments arguments)
 {
-    TRY(Core::System::pledge("stdio inet unix settime"));
+    TRY(Core::System::pledge("stdio inet unix settime wpath rpath"));
+    TRY(Core::System::unveil("/tmp/portal/lookup", "rw"));
+    TRY(Core::System::unveil("/etc/timezone", "r"));
+    TRY(Core::System::unveil(nullptr, nullptr));
 
     bool adjust_time = false;
     bool set_time = false;
@@ -121,7 +124,7 @@ ErrorOr<int> serenity_main(Main::Arguments arguments)
     }
 
     if (!adjust_time && !set_time) {
-        TRY(Core::System::pledge("stdio inet unix"));
+        TRY(Core::System::pledge("stdio inet unix rpath"));
     }
 
     auto* hostent = gethostbyname(host);
@@ -130,8 +133,7 @@ ErrorOr<int> serenity_main(Main::Arguments arguments)
         return 1;
     }
 
-    TRY(Core::System::pledge((adjust_time || set_time) ? "stdio inet settime"sv : "stdio inet"sv));
-    TRY(Core::System::unveil(nullptr, nullptr));
+    TRY(Core::System::pledge((adjust_time || set_time) ? "stdio inet settime wpath rpath"sv : "stdio inet rpath"sv));
 
     int fd = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
     if (fd < 0) {