--- sandbox/policy/features.cc.orig 2025-03-24 20:50:14 UTC +++ sandbox/policy/features.cc @@ -20,7 +20,11 @@ BASE_FEATURE(kNetworkServiceSandbox, // (Only causes an effect when feature kNetworkServiceInProcess is disabled.) BASE_FEATURE(kNetworkServiceSandbox, "NetworkServiceSandbox", +#if BUILDFLAG(IS_BSD) + base::FEATURE_ENABLED_BY_DEFAULT); +#else base::FEATURE_DISABLED_BY_DEFAULT); +#endif #if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) // Enables a fine-grained seccomp-BPF syscall filter for the network service.