Custom FreePBX crowdsec scenarios and parser cannot be disabled or removed via cscli #7629
Description
Steps to reproduce
- Install or upgrade to crowdsec version 1.0.15
- Observe that the following custom scenarios and parser for FreePBX are enabled by default because they are present locally:
runagent -m crowdsec4 cscli parsers list
runagent -m crowdsec4 cscli scenarios list
- nethesis/freepbx-bf (enabled, local) /etc/crowdsec/scenarios/freepbx-bf.yaml
- nethesis/freepbx_user_enum (enabled, local) /etc/crowdsec/scenarios/freepbx-user-enum.yaml
- nethesis/freepbx-logs (enabled, local) /etc/crowdsec/parsers/s01-parse/freepbx-logs.yaml
- Attempt to remove these scenarios using
cscli scenarios remove nethesis/freepbx-bf - Receive warning: scenario is a local item, must delete manually
Expected behavior
- The custom FreePBX scenarios and parser should not be enabled by default, or there should be an option to properly disable or remove them using standard commands.
Actual behavior
- These files are enabled because they are present locally.
- There is no possible way to remove them via cscli; manual deletion is required.
- Users receive a warning when attempting removal: "WARNING scenarios:nethesis/freepbx-bf is a local item, please delete manually. Nothing to do."
Components
- NethServer version: [please specify]
- crowdsec-1.0.15
- List of affected files:
- /etc/crowdsec/scenarios/freepbx-bf.yaml
- /etc/crowdsec/scenarios/freepbx-user-enum.yaml
- /etc/crowdsec/parsers/s01-parse/freepbx-logs.yaml
See also