melicertes / csp

The Cyber Security Platform MeliCERTes is part of the European Strategy for Cyber Security. MeliCERTes is a network for establishing confidence and trust among the national Computer Security Incident Response Teams (CSIRTs) of the Member States and for promoting swift and effective operational cooperation.
Other
30 stars 7 forks source link

MISP distribution policy violation #16

Open iglocska opened 5 years ago

iglocska commented 5 years ago

https://github.com/melicertes/csp/blob/68a050e2216dce8e7f824178c57a9b4f32b65971/csp-apps/misp/misp-tests/src/test/java/com/intrasoft/csp/misp/tests/sandbox/DistributionPolicyRectifierTest.java#L53

This is a violation of MISP's distribution model. MISP will always choose the most restrictive option in the inherited distributions. For example:

Event [distribution: your organisation only] Attribute [distribution:all communities]

The attribute above is NOT cleared for synchronisation, the container's distribution level overrides that of the contents.