Jboss_remoting_unified_invoker_rce flags location, for #315

cliffe · Jun 26, 2024 · cc2d0d5 · cc2d0d5
1 parent 4c44664
commit cc2d0d5
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 13 deletions.
diff --git a/...lities/unix/misc/jboss_remoting_unified_invoker_rce/jboss_remoting_unified_invoker_rce.pp b/...lities/unix/misc/jboss_remoting_unified_invoker_rce/jboss_remoting_unified_invoker_rce.pp
@@ -1,2 +1 @@
 include jboss_remoting_unified_invoker_rce::install
-include jboss_remoting_unified_invoker_rce::flags
diff --git a/modules/vulnerabilities/unix/misc/jboss_remoting_unified_invoker_rce/manifests/flags.pp b/modules/vulnerabilities/unix/misc/jboss_remoting_unified_invoker_rce/manifests/flags.pp
diff --git a/modules/vulnerabilities/unix/misc/jboss_remoting_unified_invoker_rce/manifests/install.pp b/modules/vulnerabilities/unix/misc/jboss_remoting_unified_invoker_rce/manifests/install.pp
@@ -5,6 +5,8 @@
   ensure_packages(['apt-transport-https', 'ca-certificates', 'wget', 'dirmngr', 'gnupg', 'software-properties-common'])
 
   $secgen_parameters = secgen_functions::get_parameters($::base64_inputs_file)
+  $leaked_filenames = $secgen_parameters['leaked_filenames']
+  $strings_to_leak = $secgen_parameters['strings_to_leak']
   $user = $secgen_parameters['unix_username'][0]
   $user_home = "/home/${user}"
 
@@ -75,4 +77,13 @@
     ensure => running,
     enable => true,
   }
+
+  ::secgen_functions::leak_files { 'jboss-flag':
+    storage_directory => $user_home,
+    leaked_filenames  => $leaked_filenames,
+    strings_to_leak   => $strings_to_leak,
+    owner             => $user,
+    mode              => '0600',
+    leaked_from       => 'jboss',
+  }
 }