diff --git services/service_manager/sandbox/win/sandbox_win.cc services/service_manager/sandbox/win/sandbox_win.cc index 31edb20931f1..eb9c43e69ec0 100644 --- services/service_manager/sandbox/win/sandbox_win.cc +++ services/service_manager/sandbox/win/sandbox_win.cc @@ -882,8 +882,11 @@ sandbox::ResultCode SandboxWin::StartSandboxedProcess( #endif // Post-startup mitigations. - mitigations = sandbox::MITIGATION_STRICT_HANDLE_CHECKS | - sandbox::MITIGATION_DLL_SEARCH_ORDER; + mitigations = sandbox::MITIGATION_DLL_SEARCH_ORDER; + if (!launcher_process_command_line.HasSwitch("win-rt-app")) { + // Don't enable this mitigation in WinRT apps. See issue #2274. + mitigations |= sandbox::MITIGATION_STRICT_HANDLE_CHECKS; + } if (!cmd_line->HasSwitch(switches::kAllowThirdPartyModules)) mitigations |= sandbox::MITIGATION_FORCE_MS_SIGNED_BINS; if (sandbox_type == SANDBOX_TYPE_NETWORK)