From b09af3e9a950819f497e5d4ebb287d390c89c875 Mon Sep 17 00:00:00 2001 From: Igor Chudov Date: Fri, 15 Nov 2019 12:20:33 +0400 Subject: [PATCH] A little comment for registry key merging facility --- gpoa/main.py | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/gpoa/main.py b/gpoa/main.py index c266a8d..f0914c4 100755 --- a/gpoa/main.py +++ b/gpoa/main.py @@ -189,10 +189,10 @@ class samba_backend(applier_backend): hive_key = '{}\\{}'.format(entry.keyname, entry.valuename) print('Merging {}'.format(hive_key)) + # FIXME: Here should be entry.type parser in order to correctly + # represent data hive.set_value(hive_key, entry.type, entry.data.to_bytes(4, byteorder='big')) - - # Dump data to disk - hive.flush() + hive.flush() # Dump data to disk def get_values(self): ''' @@ -201,10 +201,13 @@ class samba_backend(applier_backend): # FIXME: Return registry and hives instead of samba.preg objects. preg_objs = [] print('Parsing machine regpols') + for regpol in self.policy_files['machine_regpols']: print('Processing {}'.format(regpol)) pregfile = self._parse_pol_file(regpol) preg_objs.append(pregfile) + # Works only with full key names + #self.registry.diff_apply(regpol) for entry in pregfile.entries: self._merge_entry(self.machine_hive, entry)