diff --git a/common/Kconfig b/common/Kconfig
index 1c340710a33..30bf225362e 100644
--- a/common/Kconfig
+++ b/common/Kconfig
@@ -938,6 +938,7 @@ config STACKPROTECTOR
 
 config MMU_PGPROT
 	bool "Enable RO, RW and RX mappings"
+	depends on !SANDBOX
 	help
 	  U-Boot maps all pages as RWX. If selected pages will
 	  be marked as RO(.rodata), RX(.text), RW(.data) right after