See https://www.thunderbird.net/en-US/thunderbird/68.2.1/releasenotes/ Use --disable-sandbox in CONFIGURE_ARGS instead of setting invalid pledge strings, thunderbird is a monolithic process so far anyway so its pledge would be super wide.. to be revisited by someone someday ?