S: diagnosedT: buggood first issuehelp wanted
Metriche repository
- Star
- (4600 stelle)
- Metriche merge PR
- (Merge medio 17g 10h) (50 PR mergiate in 30 g)
Descrizione
I have noticed some sharing groups became active while they were previously put as passive. This is coming from synchronisation of events using those SGs. I will try to find out why but if someone has some ideas feel free to shout.
If you would like to report a bug, please fill the template bellow
Work environment
| Questions | Answers |
|---|---|
| Type of issue | Bug |
| OS version (server) | RHEL |
| OS version (client) | Win10 |
| PHP version | 7.2 |
| MISP version / git hash | 2.4.132 |
Expected behavior
Once sharing groups are put as passive by an administrator, their definition should remain as such until changed again manually.
Actual behavior
Sharing groups get the active flag automatically without any confirmation.
Steps to reproduce the behavior
- Have 2 MISP instance with a pull relationship
- Define a sharing group on one instance, create an event, pull from the other instance
- After the pull, the SG definition is accessible in the second MISP, mark it as passive
- Create a new event on the first MISP with the same SG, pull again from the second MISP
- The SG is now active again on the second MISP