diff --git a/sys/dev/netif/ath/ath/if_ath_ioctl.c b/sys/dev/netif/ath/ath/if_ath_ioctl.c
@@ -301,8 +301,12 @@
 	case SIOCGATHPHYERR:
 		return (ath_ioctl_phyerr(sc, data));
 #endif
-	case SIOCGATHSPECTRAL:
+	case SIOCGATHSPECTRAL: {
+		int error = caps_priv_check_self(SYSCAP_NODRIVER);
+		if (error)
+			return (error);
 		return (ath_ioctl_spectral(sc, data));
+	}
 	case SIOCGATHNODERATESTATS:
 		return (ath_ioctl_ratestats(sc, data));
 	default: