diff --git a/security/sandbox/linux/launch/SandboxLaunch.cpp b/security/sandbox/linux/launch/SandboxLaunch.cpp index 6617ff475dcd..9e2a7c45247c 100644 --- a/security/sandbox/linux/launch/SandboxLaunch.cpp +++ b/security/sandbox/linux/launch/SandboxLaunch.cpp @@ -319,6 +319,13 @@ void SandboxLaunch::Configure(GeckoProcessType aType, SandboxingKind aKind, flags |= CLONE_NEWNET; } break; + case GeckoProcessType_Utility: + if (level >= 1) { + canChroot = true; + flags |= CLONE_NEWIPC; + flags |= CLONE_NEWNET; + } + break; case GeckoProcessType_Content: if (level >= 4) { canChroot = true;