If you’re on debian, you need to start with --no-sandbox. This is a debian-specific issue.
To rescan, you need to pass the argument to the zcashd binary. If you installed the .deb, you can just run zcashd --rescan from a terminal, which will start the zcash daemon. You can then start zecwallet, and it will connect to the running daemon.