New review comment by thypon on void-packages repository https://github.com/void-linux/void-packages/pull/28766#discussion_r575874468 Comment: Command injection? You mean shell spawning or in general? I don't see command injection here. I mean, even $APPARMOR without anything else in a shell script it can be a command injection if you don't control the source.