diff --git a/pkgs/additional/sanebox/sanebox b/pkgs/additional/sanebox/sanebox
index 17396ad28..7b5df7e0c 100755
--- a/pkgs/additional/sanebox/sanebox
+++ b/pkgs/additional/sanebox/sanebox
@@ -870,7 +870,7 @@ capshonlyIngestCapability() {
   # therefore, only grant it those capabilities i know will succeed.
   if capsh "--has-p=cap_$1" 2>/dev/null; then
     if [ -z "$capshCapsArg" ]; then
-      capshCapsArg=cap_$1=eip
+      capshCapsArg=cap_$1=ep
     else
       capshCapsArg=cap_$1,$capshCapsArg
     fi