Add usershare prefix allow/deny list docs.

Jeremy.
(This used to be commit 13f6dba9d07ab294c413d5b36601a4919931c418)

1 files changed, 25 insertions, 0 deletions

diff --git a/docs/smbdotconf/misc/usershareprefixdenylist.xml b/docs/smbdotconf/misc/usershareprefixdenylist.xml
new file mode 100644
index 0000000000..75d4ba9afc
--- /dev/null
+++ b/docs/smbdotconf/misc/usershareprefixdenylist.xml
@@ -0,0 +1,25 @@
+<samba:parameter name="usershare prefix deny list"
+	         context="G"
+		 basic="1" advanced="1"
+		 type="string"
+		 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
+<description>
+	<para>This parameter specifies a list of absolute pathnames
+	the root of which are NOT allowed to be exported by user defined share definitions.
+	If the pathname exported starts with one of the strings in this
+	list the user defined share will not be allowed. Any pathname not
+	starting with one of these strings will be allowed to be exported
+	as a usershare. This allows the Samba administrator to restrict the
+	directories on the system that can be exported by user defined shares.
+	</para>
+	<para>
+	If there is a "usershare prefix deny list" and also a
+	"usershare prefix allow list" the deny list is processed
+	first, followed by the allow list, thus leading to the most
+	restrictive interpretation.
+	</para>
+
+</description>
+<value type="default">NULL</value>
+<value type="example">/etc /dev /private</value>
+</samba:parameter>