diff options
| author | Matthieu Patou <mat@matws.net> | 2010-09-07 17:45:55 +0400 |
|---|---|---|
| committer | Matthieu Patou <mat@matws.net> | 2010-09-26 06:22:43 +0400 |
| commit | dfa468fd088b30ed1dfdbaabd6b569c600838706 (patch) | |
| tree | 088a2660e7dfa2f7c5c1247b31605ebb1e6b4819 | |
| parent | 8a48ca4e3f2509571f0910165c9e8763864e9c7a (diff) | |
| download | samba-dfa468fd088b30ed1dfdbaabd6b569c600838706.tar.gz samba-dfa468fd088b30ed1dfdbaabd6b569c600838706.tar.bz2 samba-dfa468fd088b30ed1dfdbaabd6b569c600838706.zip | |
s4 provision: Make GPO folder group writable
The group of this folder is domain administrator and it seems sensible
that all domain administrators have the right to modify the gpo (they
have it at the NT ACLs level ...)
| -rw-r--r-- | source4/scripting/python/samba/provision.py | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/source4/scripting/python/samba/provision.py b/source4/scripting/python/samba/provision.py index c1a35c9338..0d4b8dc596 100644 --- a/source4/scripting/python/samba/provision.py +++ b/source4/scripting/python/samba/provision.py @@ -978,15 +978,15 @@ def getpolicypath(sysvolpath, dnsdomain, guid): def create_gpo_struct(policy_path): if not os.path.exists(policy_path): - os.makedirs(policy_path, 0755) + os.makedirs(policy_path, 0775) open(os.path.join(policy_path, "GPT.INI"), 'w').write( "[General]\r\nVersion=65543") p = os.path.join(policy_path, "MACHINE") if not os.path.exists(p): - os.makedirs(p, 0755) + os.makedirs(p, 0775) p = os.path.join(policy_path, "USER") if not os.path.exists(p): - os.makedirs(p, 0755) + os.makedirs(p, 0775) def create_default_gpo(sysvolpath, dnsdomain, policyguid, policyguid_dc): |