Today I have had to deal with an environment where I had to fix a lot of sysvol permissions, with a lot of different policies with different permissions.<\/p>\n
I had begun doing it by hand using samba-tool ntacl set sddl-ACL patg, but I soon realized this was a nightmare . Thus I invested some time in creating a small script on python that at least did part of this for me:<\/p>\n
import os\r\nimport sys\r\narg = sys.argv[1]\r\ncommand = "samba-tool ntacl set "\r\nwp = os.getcwd()\r\nfor dirname, dirnames, filenames in os.walk(wp):\r\n os.system(command + "\\"" + arg + "\\" " + "\\"" + dirname + "\\"")\r\n files = [f for f in os.listdir(dirname) if os.path.isfile(os.path.join(dirname,f))]\r\n for f in files:\r\n os.system(command + "\\"" + arg + "\\" " + "\\"" + dirname + "\/" + f + "\\"")\r\n<\/pre>\nWith this at least I had to do it once per policy. Once done, I just created a bash script that got the path and the sddl from samba-tool ntacl sysvolcheck (and run the script above until this command were ok:<\/p>\n
#!\/bin\/bash\r\nuntil samba-tool ntacl sysvolcheck 2>\/dev\/null\r\ndo\r\n\r\nDIR=$(samba-tool ntacl sysvolcheck 2>&1 | grep ERROR | cut -d" " -f12)\r\nPERM=$(samba-tool ntacl sysvolcheck 2>&1 | grep ERROR | cut -d" " -f19)\r\n\r\n\r\ncd "$DIR"\r\n\r\npython script.py $PERM\r\ndone\r\n<\/pre>\nHope this is useful if you were looking for this. <\/p>\n