From 4f4a8fa8e7ff457c27496885dc086549484cebc9 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Mon, 28 Apr 2025 23:04:17 +0200
Subject: [PATCH] test(check): ensurre we only match the sbin name.

---
 tests/check.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/check.sh b/tests/check.sh
index e35fd8b39..02ae71812 100644
--- a/tests/check.sh
+++ b/tests/check.sh
@@ -109,7 +109,7 @@ _ensure_vim() {
 check_sbin() {
     echo -e "\033[1m ⋅ \033[0mEnsuring '@{sbin}' is used in all profiles:"
     while IFS= read -r name; do
-        mapfile -t files < <(grep -l -R "@{bin}/$name" apparmor.d)
+        mapfile -t files < <(grep --files-with-matches --recursive -E "(^|[[:space:]])@{bin}/$name([[:space:]]|$)" apparmor.d)
         for file in "${files[@]}"; do
             _die "$file contains '@{bin}/$name' instead of '@{sbin}/$name'"
         done