Replace user login with inline execution (#2932)

Co-authored-by: Hare Sudhan <[email protected]>
redcanaryco · Sep 17, 2024 · 1076774 · 1076774
1 parent bb7c504
commit 1076774
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/atomics/T1078.003/T1078.003.yaml b/atomics/T1078.003/T1078.003.yaml
@@ -134,9 +134,7 @@ atomic_tests:
       usermod --expiredate "1" art
       usermod --unlock art
       usermod --expiredate "99999" art
-      su art
-      whoami
-      exit
+      su -c whoami art
     cleanup_command: |
       userdel -r art 
 - name: Reactivate a locked/expired account (FreeBSD)