A new release of gpupdate has been published, a tool for applying group policies in the Alt distributions. The gpupdate mechanisms apply group policies on client machines at both the system level and for individual users. The gpupdate tool is part of an alternative solution by Bazalt SPO for implementing Active Directory domain infrastructure on Linux. The application supports operation in MS AD or Samba DC domain infrastructure. The gpupdate code is written in Python and distributed under the GPLv3+ license. You can install gpupdate from the stable p10 branch of the ALT repositories.
The operation of gpupdate is based on the implementation of group policies in Linux, where policies are stored in the SysVol directory on controllers. domain. GPOA, a submodule of gpupdate, accesses the SysVol of the domain controller and loads all the group policy templates (GPT) for the system and users (Machine and User directories) and all the information from these directories. The gpupdate tool parses files with the .pol extension and creates a database. From this registry, GPOA retrieves its data, sorts and processes it, and begins to sequentially launch the 'appliers' modules.
Each of these modules is responsible for its part of applying settings. For example, there are modules related to system kernel settings, desktop settings, peripherals, browsers, and printer settings. Each module takes the relevant part of the database. For instance, the firefox applier will look for the line with firefox in the database and only process that part—specifically, it will generate a json file in the /etc/firefox/policies directory (as it is structured in Linux). Then when the web browser is launched, it refers to this directory and applies all the settings.
Changes in version 0.9.11.2:
- Application support is provided for all computer policies of web browsers Firefox and Chromium.
- Mechanisms for applying script policies have been added—logon/logoff/startup/shutdown.
- Mechanisms for applying system settings parameters (preferences): operations with files, directories, configuration files.
- A new action has been added to update service statuses in gpupdate-setup—the update key starts all necessary services when updating the engaged gpupdate.
- Improved application of user policies in terms of functionality and security. A system timer gpupdate.timer and a user timer gpupdate-user.timer for monitoring and controlling the execution time of the gpupdate.service have been introduced for Systemd. The frequency of gpupdate execution can be configured through the timer.
- Optimized the self-closing policy processing mode — "Configure self-closing processing mode of user group policy." This policy allows overriding parameters of one group policy object over another's parameters for users of the second object.
Features of version 0.9.12:
- Added a mechanism for applying Yandex browser group policies for computers.
- Mechanisms for applying system settings parameters (preferences): settings for common network resources for users.
- Added domain controller (DC) enumeration with a configured SysVol directory if the automatically selected domain controller has a SysVol that lacks group policies. By default, domain controller enumeration is disabled.
- Added the ability to generate rules for all polkit actions through group policies; an admx configuration template can be prepared for each polkit-action, which will be displayed in the configuration editing tool's console tree and in the user GPUI.
- Fixed the display of the disk mounting policy for users and added support for computer mounting:
- Added support for disk label options;
- Fixed naming conflicts for drive letters; drive letters are assigned as in Windows.
- Replaced mount points for shared resources display:
- /media/gpupdate/drives.system — для системных ресурсов;
- /media/gpupdate/.drives.system — для скрытых системных ресурсов;
- /run/media/USERNAME/drives — для общих ресурсов пользователя;
- /run/media/USERNAME/.drives — для скрытых общих ресурсов пользователя.
Source: opennet.ru
