diff options
| author | Jeremy Allison <jra@samba.org> | 2012-10-03 16:04:18 -0700 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2012-10-04 12:04:21 -0700 |
| commit | db62a159b8833a4f1aee0c9733fd263b6d239d53 (patch) | |
| tree | fd4ee8ba99f892a13b7c3e3fd3ff14d7c3752973 /docs-xml/smbdotconf/security/directorysecuritymask.xml | |
| parent | 7622aa16adeb00bf161a6dd07664c37125391272 (diff) | |
| download | samba-db62a159b8833a4f1aee0c9733fd263b6d239d53.tar.gz samba-db62a159b8833a4f1aee0c9733fd263b6d239d53.tar.bz2 samba-db62a159b8833a4f1aee0c9733fd263b6d239d53.zip | |
Remove the parameters:
security mask
force security mode
directory security mask
force directory security mode
and update the docs.
Diffstat (limited to 'docs-xml/smbdotconf/security/directorysecuritymask.xml')
| -rw-r--r-- | docs-xml/smbdotconf/security/directorysecuritymask.xml | 32 |
1 files changed, 3 insertions, 29 deletions
diff --git a/docs-xml/smbdotconf/security/directorysecuritymask.xml b/docs-xml/smbdotconf/security/directorysecuritymask.xml index 5ed85ae3f8..0bd5d9327d 100644 --- a/docs-xml/smbdotconf/security/directorysecuritymask.xml +++ b/docs-xml/smbdotconf/security/directorysecuritymask.xml @@ -3,37 +3,11 @@ type="string" xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> <description> - <para>This parameter controls what UNIX permission bits - will be set when a Windows NT client is manipulating the UNIX - permission on a directory using the native NT security dialog - box.</para> - <para> - This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus resetting - any bits not in this mask. Make sure not to mix up this parameter with <smbconfoption name="force - directory security mode"/>, which works similar like this one but uses logical OR instead of AND. - Essentially, zero bits in this mask are a set of bits that will always be set to zero. - </para> - + This parameter has been removed for Samba 4.0.0. The parameter + <smbconfoption name="directory mask"/> is now used instead to mask + any permission bit changes on directories. <para> - Essentially, all bits set to zero in this mask will result in setting to zero the corresponding bits on the - file permissions regardless of the previous status of this bits on the file. - </para> - - <para>If not set explicitly this parameter is set to 0777 - meaning a user is allowed to set all the user/group/world - permissions on a directory.</para> - - <para><emphasis>Note</emphasis> that users who can access the - Samba server through other means can easily bypass this restriction, - so it is primarily useful for standalone "appliance" systems. - Administrators of most normal systems will probably want to leave - it as the default of <constant>0777</constant>.</para> </description> -<related>force directory security mode</related> -<related>security mask</related> -<related>force security mode</related> -<value type="default">0777</value> -<value type="example">0700</value> </samba:parameter> |