summaryrefslogtreecommitdiffstats
path: root/source4/scripting/python/samba/provision.py
diff options
context:
space:
mode:
authorMatthieu Patou <mat@matws.net>2010-09-07 17:45:55 +0400
committerMatthieu Patou <mat@matws.net>2010-09-26 06:22:43 +0400
commitdfa468fd088b30ed1dfdbaabd6b569c600838706 (patch)
tree088a2660e7dfa2f7c5c1247b31605ebb1e6b4819 /source4/scripting/python/samba/provision.py
parent8a48ca4e3f2509571f0910165c9e8763864e9c7a (diff)
downloadsamba-dfa468fd088b30ed1dfdbaabd6b569c600838706.tar.gz
samba-dfa468fd088b30ed1dfdbaabd6b569c600838706.tar.xz
samba-dfa468fd088b30ed1dfdbaabd6b569c600838706.zip
s4 provision: Make GPO folder group writable
The group of this folder is domain administrator and it seems sensible that all domain administrators have the right to modify the gpo (they have it at the NT ACLs level ...)
Diffstat (limited to 'source4/scripting/python/samba/provision.py')
-rw-r--r--source4/scripting/python/samba/provision.py6
1 files changed, 3 insertions, 3 deletions
diff --git a/source4/scripting/python/samba/provision.py b/source4/scripting/python/samba/provision.py
index c1a35c93381..0d4b8dc5964 100644
--- a/source4/scripting/python/samba/provision.py
+++ b/source4/scripting/python/samba/provision.py
@@ -978,15 +978,15 @@ def getpolicypath(sysvolpath, dnsdomain, guid):
def create_gpo_struct(policy_path):
if not os.path.exists(policy_path):
- os.makedirs(policy_path, 0755)
+ os.makedirs(policy_path, 0775)
open(os.path.join(policy_path, "GPT.INI"), 'w').write(
"[General]\r\nVersion=65543")
p = os.path.join(policy_path, "MACHINE")
if not os.path.exists(p):
- os.makedirs(p, 0755)
+ os.makedirs(p, 0775)
p = os.path.join(policy_path, "USER")
if not os.path.exists(p):
- os.makedirs(p, 0755)
+ os.makedirs(p, 0775)
def create_default_gpo(sysvolpath, dnsdomain, policyguid, policyguid_dc):