protect against grep pipefail

This commit is contained in:
Patrick Schleizer 2025-05-27 11:57:21 -04:00
parent abb2207313
commit 5195977be4
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48

View file

@ -626,7 +626,7 @@ commit_policy() {
else else
if ! capsh --print \ if ! capsh --print \
| grep --fixed-strings -- "Bounding set" \ | grep --fixed-strings -- "Bounding set" \
| grep --quiet -- "${policy_capability_item}"; then | grep -- "${policy_capability_item}" >/dev/null; then
log error \ log error \
"Capability from config does not exist: '${policy_capability_item}'" \ "Capability from config does not exist: '${policy_capability_item}'" \
>&2 >&2