Fixing test T1546.004.yaml (#2930)

* Fixing last test * Fixing test to make the bash_logout being executed --------- Co-authored-by: Hare Sudhan <[email protected]>
redcanaryco · Sep 17, 2024 · 01db64e · 01db64e
1 parent c752936
commit 01db64e
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/atomics/T1546.004/T1546.004.yaml b/atomics/T1546.004/T1546.004.yaml
@@ -124,7 +124,6 @@ atomic_tests:
     elevation_required: true
     command: |
       useradd --create-home --shell /bin/bash art
-      su --login art
-      echo 'echo "Atomic Red Team was here... T1546.004" >> $HOME/art.txt' >> $HOME/.bash_logout
+      su -l art -c "echo 'echo \"Atomic Red Team was here... T1546.004\" >> /home/art/art.txt' >> /home/art/.bash_logout; exit"
     cleanup_command: |
       userdel -fr art