search for: se_dacl_present

Hi Samba List, hope you're doing well all. We have realized a security audit of our Samba4 Active Directory. It returns that the security descriptors options of all our GPO objects are wrong. They should be : SE_DACL_AUTO_INHERITED SE_DACL_PRESENT instead of this, the options are by default : SE_DACL_PROTECTED SE_DACL_PRESENT We can change the options, but the "sysvolreset" command of samba-tool revert our changes at every run. (BTW we use sysvolreset because "sysvolcheck" returns errors after each GPO creation, with...

...[0].pack(''L'') revision = [0].pack(''L'') if @@GetSecurityDescriptorControl.call(sec_buf, control, revision) == 0 raise ArgumentError, get_last_error end # No DACL exists if (control.unpack(''L'').first & SE_DACL_PRESENT) == 0 raise ArgumentError, ''No DACL present: explicit deny all'' end dacl_present = [0].pack(''L'') dacl_defaulted = [0].pack(''L'') acl_ptr = [0].pack(''L'') val = @@GetSecurityDescri...