protect against grep pipefail

This commit is contained in:
Patrick Schleizer 2025-05-27 11:57:21 -04:00
parent abb2207313
commit 5195977be4
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48

View file

@ -626,7 +626,7 @@ commit_policy() {
else
if ! capsh --print \
| grep --fixed-strings -- "Bounding set" \
| grep --quiet -- "${policy_capability_item}"; then
| grep -- "${policy_capability_item}" >/dev/null; then
log error \
"Capability from config does not exist: '${policy_capability_item}'" \
>&2