diff --git a/src/detection/initsystem/initsystem_linux.c b/src/detection/initsystem/initsystem_linux.c
index 12243bb4d2..9bbcbda03d 100644
--- a/src/detection/initsystem/initsystem_linux.c
+++ b/src/detection/initsystem/initsystem_linux.c
@@ -39,8 +39,10 @@ const char* ffDetectInitSystem(FFInitSystemResult* result) {
         // In some old system, /sbin/init is a symlink
         char buf[PATH_MAX];
         if (realpath(result->exe.chars, buf)) {
+            char baseBuf[PATH_MAX];
+            ffStrCopy(baseBuf, buf, sizeof(baseBuf));
+            ffStrbufSetS(&result->name, basename(baseBuf));
             ffStrbufSetS(&result->exe, buf);
-            ffStrbufSetS(&result->name, basename(result->exe.chars));
         }
     }