diff --git a/src/detection/terminalshell/terminalshell_linux.c b/src/detection/terminalshell/terminalshell_linux.c index a8e453ca5..2b6b350ed 100644 --- a/src/detection/terminalshell/terminalshell_linux.c +++ b/src/detection/terminalshell/terminalshell_linux.c @@ -285,7 +285,9 @@ static pid_t getTerminalInfo(FFTerminalResult* result, pid_t pid) ffStrEquals(name, "xonsh") || // works in Linux but not in macOS because kernel returns `Python` in this case ffStrEquals(name, "login") || ffStrEquals(name, "sshd") || - ffStrEquals(name, "flatpak-session-helper") || // #707 + #ifdef __linux__ + ffStrStartsWith(name, "flatpak-") || // #707 + #endif ffStrEndsWith(name, ".sh") ) {