From 0c3657c3db37d1b02a7d8bb8514dda1fca2c21b0 Mon Sep 17 00:00:00 2001
From: Kieran Klukas <me@dunkirk.sh>
Date: Wed, 13 Aug 2025 22:54:35 -0400
Subject: [PATCH] bug: fix tuigreet strings not being escaped

---
 modules/nixos/apps/tuigreet.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/modules/nixos/apps/tuigreet.nix b/modules/nixos/apps/tuigreet.nix
index ab89255..2816c5c 100644
--- a/modules/nixos/apps/tuigreet.nix
+++ b/modules/nixos/apps/tuigreet.nix
@@ -75,20 +75,20 @@ let
     ]
     ++ lib.optionals (cfg.sessionWrapper != null && cfg.sessionWrapper != [ ]) [
       "--session-wrapper"
-      (lib.concatStringsSep " " cfg.sessionWrapper)
+      (lib.escapeShellArg (lib.concatStringsSep " " cfg.sessionWrapper))
     ]
     ++ lib.optionals (cfg.xsessionWrapper != null && cfg.xsessionWrapper != [ ]) [
       "--xsession-wrapper"
-      (lib.concatStringsSep " " cfg.xsessionWrapper)
+      (lib.escapeShellArg (lib.concatStringsSep " " cfg.xsessionWrapper))
     ]
     ++ lib.optionals cfg.noXsessionWrapper [ "--no-xsession-wrapper" ]
     ++ lib.optionals (cfg.powerShutdown != null && cfg.powerShutdown != [ ]) [
       "--power-shutdown"
-      (lib.concatStringsSep " " cfg.powerShutdown)
+      (lib.escapeShellArg (lib.concatStringsSep " " cfg.powerShutdown))
     ]
     ++ lib.optionals (cfg.powerReboot != null && cfg.powerReboot != [ ]) [
       "--power-reboot"
-      (lib.concatStringsSep " " cfg.powerReboot)
+      (lib.escapeShellArg (lib.concatStringsSep " " cfg.powerReboot))
     ]
     ++ lib.optionals cfg.powerNoSetsid [ "--power-no-setsid" ]
     ++ lib.optionals (cfg.kbCommand != null) [
-- 
2.51.2