CommandFilter should allow exec from full path

The current logic prevents from using a full path as argument.
We can't just compare basename to basename as it would allow passing
bogus paths. We need to make sure that passing a full path will compare
to the config's full path.

Closes-Bug: #1956606

Change-Id: I76094065de5b37f59a2500fbce7f500ada9915da