diff --git a/script/bootstrap b/script/bootstrap
index 8c6b9b261..e61357e1a 100755
--- a/script/bootstrap
+++ b/script/bootstrap
@@ -34,10 +34,6 @@ if (dependenciesFingerprint.isOutdated()) {
 
 if (process.platform === 'win32') deleteMsbuildFromPath()
 
-if(process.platform === 'linux') {
- childProcess.execSync('sysctl kernel.unprivileged_userns_clone=1')
-}
-
 installScriptDependencies(ci)
 installApm(ci)
 childProcess.execFileSync(
diff --git a/script/vsts/platforms/linux.yml b/script/vsts/platforms/linux.yml
index 04ed248bf..2c0a84fc3 100644
--- a/script/vsts/platforms/linux.yml
+++ b/script/vsts/platforms/linux.yml
@@ -57,6 +57,11 @@ jobs:
       - script: script/lint
         displayName: Run linter
 
+      - script: |
+          sudo chown root chrome-sandbox
+          chmod 4755 chrome-sandbox
+          displayName: Tweaking chrome-sandbox binary
+
       - script: script/build --no-bootstrap --create-debian-package --create-rpm-package --compress-artifacts
         env:
           GITHUB_TOKEN: $(GITHUB_TOKEN)