Index: sandbox/win/src/broker_services.cc |
diff --git a/sandbox/win/src/broker_services.cc b/sandbox/win/src/broker_services.cc |
index 8a29f9ba6aa7d3e39a1a58dff899881448649f83..d88e5eba0192335af1df721ea3ca7dd80d3e3d76 100644 |
--- a/sandbox/win/src/broker_services.cc |
+++ b/sandbox/win/src/broker_services.cc |
@@ -88,8 +88,8 @@ bool IsTokenCacheable(const sandbox::PolicyBase* policy) { |
const sandbox::AppContainerAttributes* app_container = |
policy->GetAppContainer(); |
- // We cannot cache tokens with an app container. |
- if (app_container) |
+ // We cannot cache tokens with an app container or lowbox. |
+ if (app_container || policy->GetLowBoxSid()) |
return false; |
return true; |