After restart caldera the deleted Fact Sources will come back again

[dickens88]

Hello guys,

Sorry, but this is the second time I open this topic, the first time is here #2689.

I tried to use CRTL+C to stop caldera server, but this result is all the same.

To Reproduce
Steps to reproduce the behavior:

1. I run some operations and they generated serveral Fact Sources automatically.
2. I click to fact sources page and saw the new items
   
3. I delete all those items one by one. it seems success when i click Delete Source. because it just disappear from the list then.
4. I restart the server by press CRTL+C or kill -2 pid, but after that all those deleted fact sources appears again.

I saw all the generated fact sources ware keep in /opt/caldera/data/sources that ware never been deleted ...

the caldera version is v4.0 release

[github-actions]

This issue is stale because it has been open 20 days with no activity. Remove stale label or comment or this will be closed in 5 days

[mkultraWasHere]

@dickens88 Apologies have not had time to look into. As a temporary fix could you restart Caldera with the '--fresh' flag that tosses the past saved data?

[dickens88]

Hi @elegantmoose thank you for the reply. I tried restart with '--fresh' but it will remove all the things inside of data folder. It looks like a 'Force Initialization'. Fortunately, I found the archived files in the backup directory, otherwise I would have lost the test cases I added myself.

anyway, If i would like to delete the fact source which generated by operations automatically, i have to find the file under data/sources before I restart caldera.

[github-actions]

This issue is stale because it has been open 20 days with no activity. Remove stale label or comment or this will be closed in 5 days

[mkultraWasHere]

@dickens88 Looking into. (apologies for late response)

[mkultraWasHere]

@dickens88 I couldnt reproduce. What Caldera version and OS are you using?

[dickens88]

Thanks for the reply. I'm using Kali 2022.3 which based on Debian 5.18.5. Maybe OS is the issue, I will try another machine.