Skip to content

Commit 2a125e2

Browse files
committed
Terminal (Linux): ignore SessionLeader
I don't know why it's there, but let's ignore it for now
1 parent 4a7e60e commit 2a125e2

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

src/detection/terminalshell/terminalshell_linux.c

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -231,6 +231,7 @@ static pid_t getShellInfo(FFShellResult* result, pid_t pid)
231231
ffStrEquals(name, "ltrace") ||
232232
ffStrEquals(name, "perf") ||
233233
ffStrEquals(name, "guake-wrapped") ||
234+
ffStrEquals(name, "SessionLeader") || // #750
234235
ffStrContainsIgnCase(name, "debug") ||
235236
ffStrContainsIgnCase(name, "not-found") ||
236237
ffStrEndsWith(name, ".sh")

0 commit comments

Comments
 (0)