diff --git a/mail-client/thunderbird/thunderbird-8.0-r1.ebuild b/mail-client/thunderbird/thunderbird-8.0-r1.ebuild
index a4f8a48..3b0c6aa 100644
--- a/mail-client/thunderbird/thunderbird-8.0-r1.ebuild
+++ b/mail-client/thunderbird/thunderbird-8.0-r1.ebuild
@@ -245,6 +245,9 @@ src_install() {
 	declare MOZILLA_FIVE_HOME="/usr/$(get_libdir)/${PN}"
 	declare emid
 
+	# Pax mark xpcshell for hardened support, only used for startupcache creation.
+	pax-mark m "${S}"/mozilla/dist/bin/xpcshell
+
 	emake DESTDIR="${D}" install || die "emake install failed"
 
 	if ! use bindist; then