diff --git a/bin/bitbake-worker b/bin/bitbake-worker
index 208f512fd..50380201c 100755
--- a/bin/bitbake-worker
+++ b/bin/bitbake-worker
@@ -293,6 +293,7 @@ def fork_off_task(cfg, data, databuilder, workerdata, extraconfigdata, runtask):
                         bb.utils.disable_network(uid, gid)
                     else:
                         logger.debug("Skipping disable network for %s since %s is not a local uid." % (taskname, uid))
+                    bb.utils.landlock_restrict_network()
 
                 # exported_vars() expands each value, so it must be called before
                 # empty_environment() below: an expansion that shells out needs the