diff options
| author | Michael Adam <obnox@samba.org> | 2013-09-02 16:54:15 +0200 |
|---|---|---|
| committer | Michael Adam <obnox@samba.org> | 2013-09-11 01:20:59 +0200 |
| commit | a2a3c9f36d7a19d75924cff25fa1b450d85ee6d6 (patch) | |
| tree | c68a6065d62c67bf3e4aa228537ab47fe3da3e12 /docs-xml/smbdotconf | |
| parent | 1e29d730663382875d96c275c60e022a1c33a2d1 (diff) | |
| download | samba-a2a3c9f36d7a19d75924cff25fa1b450d85ee6d6.tar.gz samba-a2a3c9f36d7a19d75924cff25fa1b450d85ee6d6.tar.bz2 samba-a2a3c9f36d7a19d75924cff25fa1b450d85ee6d6.zip | |
docs: document "acl allow execute always"
Signed-off-by: Michael Adam <obnox@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Reviewed-by: David Disseldorp <ddiss@samba.org>
Autobuild-User(master): Michael Adam <obnox@samba.org>
Autobuild-Date(master): Wed Sep 11 01:21:00 CEST 2013 on sn-devel-104
Diffstat (limited to 'docs-xml/smbdotconf')
| -rw-r--r-- | docs-xml/smbdotconf/protocol/aclallowexecutealways.xml | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/docs-xml/smbdotconf/protocol/aclallowexecutealways.xml b/docs-xml/smbdotconf/protocol/aclallowexecutealways.xml new file mode 100644 index 0000000000..048c388e07 --- /dev/null +++ b/docs-xml/smbdotconf/protocol/aclallowexecutealways.xml @@ -0,0 +1,26 @@ +<samba:parameter name="acl allow execute always" + context="S" + type="boolean" + advanced="1" wizard="1" + xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> +<description> + <para> + This boolean parameter controls the behaviour of <citerefentry><refentrytitle>smbd</refentrytitle> + <manvolnum>8</manvolnum></citerefentry> when receiving a protocol request of "open for execution" + from a Windows client. + With Samba 3.6 and older, the execution right in the ACL was not checked, so a client + could execute a file even if it did not have execute rights on the file. In Samba 4.0, + this has been fixed, so that by default, i.e. when this parameter is set to "False", + open for execution is now denied when execution permissions are not present. + </para> + <para> + If this parameter is set to "True", Samba does not check execute permissions on + "open for execution, thus re-establishing the behaviour of Samba 3.6. + This can be useful to smoothen upgrades from older Samba versions to 4.0 and newer. + This setting is not not meant to be used as a permanent setting, but as a temporary relief: + It is recommended to fix the permissions in the ACLs and reset this parameter to the + default after a ceratain transition period. + </para> +</description> +<value type="default">False</value> +</samba:parameter> |