mirror of
https://github.com/saltstack/salt.git
synced 2025-04-17 10:10:20 +00:00
correct tool extension guid for user registry policies
This commit is contained in:
Ethan Moore
parent
08f0078ef3
commit
ff7d74bfb0
1 changed files with 23 additions and 18 deletions
|
|
@ -1637,21 +1637,20 @@ class _policy_info(object):
|
|||
'policy_path': os.path.join(os.getenv('WINDIR'), 'System32', 'GroupPolicy', 'User', 'Registry.pol'),
|
||||
'hive': 'HKEY_USERS',
|
||||
'lgpo_section': 'User Configuration',
|
||||
'gpt_extension_location': 'gPCUserExtensionNames'
|
||||
'gpt_extension_location': 'gPCUserExtensionNames',
|
||||
'gpt_extension_guid': '[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}]'
|
||||
},
|
||||
'Machine': {
|
||||
'policy_path': os.path.join(os.getenv('WINDIR'), 'System32', 'GroupPolicy', 'Machine', 'Registry.pol'),
|
||||
'hive': 'HKEY_LOCAL_MACHINE',
|
||||
'lgpo_section': 'Computer Configuration',
|
||||
'gpt_extension_location': 'gPCMachineExtensionNames'
|
||||
'gpt_extension_location': 'gPCMachineExtensionNames',
|
||||
'gpt_extension_guid': '[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F72-3407-48AE-BA88-E8213C6761F1}]'
|
||||
},
|
||||
}
|
||||
self.reg_pol_header = u'\u5250\u6765\x01\x00'
|
||||
self.gpt_ini_info = {
|
||||
'path': os.path.join(os.getenv('WINDIR'), 'System32',
|
||||
'GroupPolicy', 'gpt.ini'),
|
||||
'admxExtension': '[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F72-3407-48AE-BA88-E8213C6761F1}]'
|
||||
}
|
||||
self.gpt_ini_path = os.path.join(os.getenv('WINDIR'), 'System32',
|
||||
'GroupPolicy', 'gpt.ini')
|
||||
|
||||
@classmethod
|
||||
def _notEmpty(cls, val, **kwargs):
|
||||
|
|
@ -3229,7 +3228,11 @@ def _regexSearchKeyValueCombo(policy_data, policy_regpath, policy_regkey):
|
|||
return None
|
||||
|
||||
|
||||
def _write_regpol_data(data_to_write, policy_file_path, gpt_ini, gpt_extension):
|
||||
def _write_regpol_data(data_to_write,
|
||||
policy_file_path,
|
||||
gpt_ini_path,
|
||||
gpt_extension,
|
||||
gpt_extension_guid):
|
||||
'''
|
||||
helper function to actually write the data to a Registry.pol file
|
||||
|
||||
|
|
@ -3239,8 +3242,9 @@ def _write_regpol_data(data_to_write, policy_file_path, gpt_ini, gpt_extension):
|
|||
|
||||
data_to_write: data to write into the user/machine registry.pol file
|
||||
policy_file_path: path to the registry.pol file
|
||||
gpt_ini: gpt_ini_info dict from the _policy_info class
|
||||
gpt_ini_path: path to gpt.ini file
|
||||
gpt_extension: gpt extension list name from _policy_info class for this registry class gpt_extension_location
|
||||
gpt_extension_guid: admx registry extension guid for the class
|
||||
'''
|
||||
try:
|
||||
if data_to_write:
|
||||
|
|
@ -3251,8 +3255,8 @@ def _write_regpol_data(data_to_write, policy_file_path, gpt_ini, gpt_extension):
|
|||
pol_file.write(data_to_write.encode('utf-16-le'))
|
||||
try:
|
||||
gpt_ini_data = ''
|
||||
if os.path.exists(gpt_ini['path']):
|
||||
with open(gpt_ini['path'], 'rb') as gpt_file:
|
||||
if os.path.exists(gpt_ini_path):
|
||||
with open(gpt_ini_path, 'rb') as gpt_file:
|
||||
gpt_ini_data = gpt_file.read()
|
||||
if not _regexSearchRegPolData(r'\[General\]\r\n', gpt_ini_data):
|
||||
gpt_ini_data = '[General]\r\n' + gpt_ini_data
|
||||
|
|
@ -3262,10 +3266,10 @@ def _write_regpol_data(data_to_write, policy_file_path, gpt_ini, gpt_extension):
|
|||
gpt_ini_data,
|
||||
re.IGNORECASE | re.MULTILINE)
|
||||
gpt_ext_str = gpt_ini_data[gpt_ext_loc.start():gpt_ext_loc.end()]
|
||||
if not _regexSearchRegPolData(r'{0}'.format(re.escape(gpt_ini['admxExtension'])),
|
||||
if not _regexSearchRegPolData(r'{0}'.format(re.escape(gpt_extension_guid)),
|
||||
gpt_ext_str):
|
||||
gpt_ext_str = gpt_ext_str.split('=')
|
||||
gpt_ext_str[1] = gpt_ini['admxExtension'] + gpt_ext_str[1]
|
||||
gpt_ext_str[1] = gpt_extension_guid + gpt_ext_str[1]
|
||||
gpt_ext_str = '='.join(gpt_ext_str)
|
||||
gpt_ini_data = gpt_ini_data[0:gpt_ext_loc.start()] + gpt_ext_str + gpt_ini_data[gpt_ext_loc.end():]
|
||||
else:
|
||||
|
|
@ -3274,7 +3278,7 @@ def _write_regpol_data(data_to_write, policy_file_path, gpt_ini, gpt_extension):
|
|||
re.IGNORECASE | re.MULTILINE)
|
||||
gpt_ini_data = "{0}{1}={2}\r\n{3}".format(
|
||||
gpt_ini_data[general_location.start():general_location.end()],
|
||||
gpt_extension, gpt_ini['admxExtension'],
|
||||
gpt_extension, gpt_extension_guid,
|
||||
gpt_ini_data[general_location.end():])
|
||||
# https://technet.microsoft.com/en-us/library/cc978247.aspx
|
||||
if _regexSearchRegPolData(r'Version=', gpt_ini_data):
|
||||
|
|
@ -3308,11 +3312,11 @@ def _write_regpol_data(data_to_write, policy_file_path, gpt_ini, gpt_extension):
|
|||
int("{0}{1}".format(str(version_nums[0]).zfill(4), str(version_nums[1]).zfill(4)), 16),
|
||||
gpt_ini_data[general_location.end():])
|
||||
if gpt_ini_data:
|
||||
with open(gpt_ini['path'], 'wb') as gpt_file:
|
||||
with open(gpt_ini_path, 'wb') as gpt_file:
|
||||
gpt_file.write(gpt_ini_data)
|
||||
except Exception as e:
|
||||
msg = 'An error occurred attempting to write to {0}, the exception was {1}'.format(
|
||||
gpt_ini['path'], e)
|
||||
gpt_ini_path, e)
|
||||
raise CommandExecutionError(msg)
|
||||
except Exception as e:
|
||||
msg = 'An error occurred attempting to write to {0}, the exception was {1}'.format(policy_file_path, e)
|
||||
|
|
@ -3698,8 +3702,9 @@ def _writeAdminTemplateRegPolFile(admtemplate_data,
|
|||
append_only=True)
|
||||
_write_regpol_data(existing_data,
|
||||
policy_data.admx_registry_classes[registry_class]['policy_path'],
|
||||
policy_data.gpt_ini_info,
|
||||
policy_data.admx_registry_classes[registry_class]['gpt_extension_location'])
|
||||
policy_data.gpt_ini_path,
|
||||
policy_data.admx_registry_classes[registry_class]['gpt_extension_location'],
|
||||
policy_data.admx_registry_classes[registry_class]['gpt_extension_guid'])
|
||||
except Exception as e:
|
||||
log.error('Unhandled exception {0} occurred while attempting to write Adm Template Policy File'.format(e))
|
||||
return False
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue