diff --git a/Userland/Applications/Assistant/main.cpp b/Userland/Applications/Assistant/main.cpp index b9983ac4f0c..6772de427ab 100644 --- a/Userland/Applications/Assistant/main.cpp +++ b/Userland/Applications/Assistant/main.cpp @@ -148,6 +148,8 @@ ErrorOr serenity_main(Main::Arguments arguments) { TRY(Core::System::pledge("stdio recvfd sendfd rpath cpath unix proc exec thread map_fixed")); + TRY(Core::System::enter_jail_mode()); + Core::LockFile lockfile("/tmp/lock/assistant.lock"); if (!lockfile.is_held()) { diff --git a/Userland/Applications/Browser/main.cpp b/Userland/Applications/Browser/main.cpp index 3d664228910..ae8dc6b3def 100644 --- a/Userland/Applications/Browser/main.cpp +++ b/Userland/Applications/Browser/main.cpp @@ -180,6 +180,8 @@ ErrorOr serenity_main(Main::Arguments arguments) TRY(Core::System::unveil("/bin/Browser", "x")); TRY(Core::System::unveil(nullptr, nullptr)); + TRY(Core::System::enter_jail_mode()); + WebView::ChromeProcess chrome_process; if (TRY(chrome_process.connect(specified_urls, new_window)) == WebView::ChromeProcess::ProcessDisposition::ExitProcess) { outln("Opening in existing process");