diff --git a/parser/rc.apparmor.functions b/parser/rc.apparmor.functions
index 4611c4112..8d50e800f 100644
--- a/parser/rc.apparmor.functions
+++ b/parser/rc.apparmor.functions
@@ -91,7 +91,7 @@ is_container_with_internal_policy() {
 	local ns_name
 
 	# WSL needs to be detected explicitly
-	if [ $(systemd-detect-virt --container) = "wsl" ]; then
+	if [ "$(systemd-detect-virt --container)" = "wsl" ]; then
 		return 0
 	fi