colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

sane-sandboxed: fix CLI escaping with capsh

Browse Source
This commit is contained in:
Colin
2024-01-28 11:11:07 +00:00
parent e536e3c718
commit 294f167df0
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
modules/programs/sane-sandboxed
View File

@@ -349,8 +349,7 @@ capshonlyIngestCapability() {
capshonlyExec() { capshonlyExec() {
PATH="$PATH:@libcap@/bin" exec \ PATH="$PATH:@libcap@/bin" exec \
capsh "--caps=$capshCapsArg" -- \ capsh "--caps=$capshCapsArg" --shell="${cliArgs[0]}" -- "${cliArgs[@]:1}"
-c "${cliArgs[*]}"
} }