summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMatthieu Patou <mat@matws.net>2010-09-07 17:45:55 +0400
committerMatthieu Patou <mat@matws.net>2010-09-26 06:22:43 +0400
commitdfa468fd088b30ed1dfdbaabd6b569c600838706 (patch)
tree088a2660e7dfa2f7c5c1247b31605ebb1e6b4819
parent8a48ca4e3f2509571f0910165c9e8763864e9c7a (diff)
downloadsamba-dfa468fd088b30ed1dfdbaabd6b569c600838706.tar.gz
samba-dfa468fd088b30ed1dfdbaabd6b569c600838706.tar.bz2
samba-dfa468fd088b30ed1dfdbaabd6b569c600838706.zip
s4 provision: Make GPO folder group writable
The group of this folder is domain administrator and it seems sensible that all domain administrators have the right to modify the gpo (they have it at the NT ACLs level ...)
-rw-r--r--source4/scripting/python/samba/provision.py6
1 files changed, 3 insertions, 3 deletions
diff --git a/source4/scripting/python/samba/provision.py b/source4/scripting/python/samba/provision.py
index c1a35c9338..0d4b8dc596 100644
--- a/source4/scripting/python/samba/provision.py
+++ b/source4/scripting/python/samba/provision.py
@@ -978,15 +978,15 @@ def getpolicypath(sysvolpath, dnsdomain, guid):
def create_gpo_struct(policy_path):
if not os.path.exists(policy_path):
- os.makedirs(policy_path, 0755)
+ os.makedirs(policy_path, 0775)
open(os.path.join(policy_path, "GPT.INI"), 'w').write(
"[General]\r\nVersion=65543")
p = os.path.join(policy_path, "MACHINE")
if not os.path.exists(p):
- os.makedirs(p, 0755)
+ os.makedirs(p, 0775)
p = os.path.join(policy_path, "USER")
if not os.path.exists(p):
- os.makedirs(p, 0755)
+ os.makedirs(p, 0775)
def create_default_gpo(sysvolpath, dnsdomain, policyguid, policyguid_dc):