From 1b2cbdba8dc08108787d365c4754bee990f0afda Mon Sep 17 00:00:00 2001
From: George Allen <gallen@carbonblack.com>
Date: Tue, 23 Nov 2021 22:39:51 +0000
Subject: [PATCH] T1485 - constrains dd to write the original file size when
 overwriting

---
 atomics/T1485/T1485.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/atomics/T1485/T1485.yaml b/atomics/T1485/T1485.yaml
index 9d616fc0..98aa04e5 100644
--- a/atomics/T1485/T1485.yaml
+++ b/atomics/T1485/T1485.yaml
@@ -51,5 +51,5 @@ atomic_tests:
       default: /var/log/syslog
   executor:
     command: |
-      dd of=#{file_to_overwrite} if=#{overwrite_source}
+      dd of=#{file_to_overwrite} if=#{overwrite_source} count=$(ls -l #{file_to_overwrite} | awk '{print $5}') iflag=count_bytes
     name: bash