From f49a95f3349de15dcf9b43bd3a60ccfabb081838 Mon Sep 17 00:00:00 2001
From: m4wh6k <84995001+m4wh6k@users.noreply.github.com>
Date: Fri, 31 Dec 2021 20:12:02 -0800
Subject: [PATCH] rule(macro modify_shell_history): Fix missing s on endswith

Signed-off-by: m4wh6k m4wh6k@users.noreply.github.com
---
 rules/falco_rules.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
index 0e43af4d..ce0a2721 100644
--- a/rules/falco_rules.yaml
+++ b/rules/falco_rules.yaml
@@ -2572,7 +2572,7 @@
       evt.arg.name contains "fish_read_history" or
       evt.arg.name endswith "fish_history" or
       evt.arg.oldpath contains "bash_history" or
-      evt.arg.oldpath endwith "zsh_history" or
+      evt.arg.oldpath endswith "zsh_history" or
       evt.arg.oldpath contains "fish_read_history" or
       evt.arg.oldpath endswith "fish_history" or
       evt.arg.path contains "bash_history" or