summaryrefslogtreecommitdiff
path: root/docs-xml/smbdotconf/security/forcesecuritymode.xml
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2012-10-03 16:04:18 -0700
committerJeremy Allison <jra@samba.org>2012-10-04 12:04:21 -0700
commitdb62a159b8833a4f1aee0c9733fd263b6d239d53 (patch)
treefd4ee8ba99f892a13b7c3e3fd3ff14d7c3752973 /docs-xml/smbdotconf/security/forcesecuritymode.xml
parent7622aa16adeb00bf161a6dd07664c37125391272 (diff)
downloadsamba-db62a159b8833a4f1aee0c9733fd263b6d239d53.tar.gz
samba-db62a159b8833a4f1aee0c9733fd263b6d239d53.tar.bz2
samba-db62a159b8833a4f1aee0c9733fd263b6d239d53.zip
Remove the parameters:
security mask force security mode directory security mask force directory security mode and update the docs.
Diffstat (limited to 'docs-xml/smbdotconf/security/forcesecuritymode.xml')
-rw-r--r--docs-xml/smbdotconf/security/forcesecuritymode.xml38
1 files changed, 5 insertions, 33 deletions
diff --git a/docs-xml/smbdotconf/security/forcesecuritymode.xml b/docs-xml/smbdotconf/security/forcesecuritymode.xml
index 7451ef91ae..b6713b10b0 100644
--- a/docs-xml/smbdotconf/security/forcesecuritymode.xml
+++ b/docs-xml/smbdotconf/security/forcesecuritymode.xml
@@ -4,38 +4,10 @@
xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
<para>
- This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
- the UNIX permission on a file using the native NT security dialog box.
- </para>
-
- <para>
- This parameter is applied as a mask (OR'ed with) to the changed permission bits, thus forcing any bits in this
- mask that the user may have modified to be on. Make sure not to mix up this parameter with <smbconfoption
- name="security mask"/>, which works similar like this one but uses logical AND instead of OR.
- </para>
-
- <para>
- Essentially, one bits in this mask may be treated as a set of bits that, when modifying security on a file,
- the user has always set to be on.
- </para>
-
- <para>
- If not set explicitly this parameter is set to 0, and allows a user to modify all the user/group/world
- permissions on a file, with no restrictions.
- </para>
-
- <para><emphasis>
- Note</emphasis> that users who can access the Samba server through other means can easily bypass this
- restriction, so it is primarily useful for standalone &quot;appliance&quot; systems. Administrators of most
- normal systems will probably want to leave this set to 0000.
- </para>
-
+ This parameter has been removed for Samba 4.0.0. The parameter
+ <smbconfoption name="force create mode"/> is now used instead to
+ force any permission changes on files to include specific UNIX
+ permission bits.
+ </para>
</description>
-
-<value type="default">0</value>
-<value type="example">700</value>
-
-<related>force directory security mode</related>
-<related>directory security mask</related>
-<related>security mask</related>
</samba:parameter>