sane-sandboxed: fix CLI escaping with capsh

2024-01-28 11:11:07 +00:00
parent e536e3c718
commit 294f167df0
1 changed files with 1 additions and 2 deletions
--- a/modules/programs/sane-sandboxed
+++ b/modules/programs/sane-sandboxed
@@ -349,8 +349,7 @@ capshonlyIngestCapability() {

 capshonlyExec() {
  PATH="$PATH:@libcap@/bin" exec \
-    capsh "--caps=$capshCapsArg" -- \
-      -c "${cliArgs[*]}"
+    capsh "--caps=$capshCapsArg" --shell="${cliArgs[0]}" -- "${cliArgs[@]:1}"
 }