diff --git a/dev/run b/dev/run
index 3b28bc4..823206a 100755
--- a/dev/run
+++ b/dev/run
@@ -477,9 +477,7 @@
     env = os.environ.copy()
     if "HAPROXY_PORT" not in env:
         env["HAPROXY_PORT"] = ctx["haproxy_port"]
-    return sp.Popen(
-        " ".join(cmd), shell=True, stdin=sp.PIPE, stdout=log, stderr=sp.STDOUT, env=env
-    )
+    return sp.Popen(cmd, stdin=sp.PIPE, stdout=log, stderr=sp.STDOUT, env=env)
 
 
 def boot_nouveau(ctx):
@@ -498,9 +496,8 @@
     logfname = os.path.join(ctx["devdir"], "logs", "nouveau.log")
     log = open(logfname, "w")
     return sp.Popen(
-        " ".join(cmd),
+        cmd,
         cwd="nouveau",
-        shell=True,
         stdin=sp.PIPE,
         stdout=log,
         stderr=sp.STDOUT,