diff --git a/modules/vulnerabilities/unix/http/lucee_rce/manifests/configure.pp b/modules/vulnerabilities/unix/http/lucee_rce/manifests/configure.pp index fef6c3604..b207d8bfb 100644 --- a/modules/vulnerabilities/unix/http/lucee_rce/manifests/configure.pp +++ b/modules/vulnerabilities/unix/http/lucee_rce/manifests/configure.pp @@ -8,6 +8,10 @@ class lucee_rce::configure { Exec { path => ['/bin', '/usr/bin', '/usr/local/bin', '/sbin', '/usr/sbin'] } + file { '/usr/local/src/lucee-express-5.3.7.43.zip': + ensure => absent + } + ::secgen_functions::leak_files { 'lucee-flag-leak': storage_directory => '/root', leaked_filenames => $leaked_filenames, diff --git a/modules/vulnerabilities/unix/http/lucee_rce/manifests/install.pp b/modules/vulnerabilities/unix/http/lucee_rce/manifests/install.pp index 178e5d87c..17c71cbb7 100644 --- a/modules/vulnerabilities/unix/http/lucee_rce/manifests/install.pp +++ b/modules/vulnerabilities/unix/http/lucee_rce/manifests/install.pp @@ -9,7 +9,7 @@ class lucee_rce::install { "${releasename}.partab"] $secgen_parameters = secgen_functions::get_parameters($::base64_inputs_file) - $port = $secgen_parameters['port'] + $port = $secgen_parameters['port'][0] ensure_packages(['openjdk-11-jdk'], { ensure => 'installed'}) @@ -34,10 +34,10 @@ class lucee_rce::install { -> exec { 'giveperms-lucee': command => 'chmod -R 777 /usr/local/src/bin/', } + -> exec { 'chown-lucee': + command => 'chown -R www-data:www-data /usr/local/src/bin/', + } -> exec { 'set-port': command => "sed -i 's/8888/${port}/' /usr/local/src/conf/server.xml" } - #-> file { '/usr/local/src/lucee-express-5.3.7.43.zip': - # ensure => absent - #} }