diff options
| author | John Terpstra <jht@samba.org> | 2005-07-08 10:16:53 +0000 |
|---|---|---|
| committer | Gerald W. Carter <jerry@samba.org> | 2008-04-23 08:47:04 -0500 |
| commit | 97e3e540f72021d81b34f7597506da6cdc552b8a (patch) | |
| tree | 0fbf5ca9ee58fead3c6ac25d60d27ffe25aeebf6 /docs/smbdotconf/security/forcesecuritymode.xml | |
| parent | 9953c886c64bd94778d8b78aea4699748a15abac (diff) | |
| download | samba-97e3e540f72021d81b34f7597506da6cdc552b8a.tar.gz samba-97e3e540f72021d81b34f7597506da6cdc552b8a.tar.bz2 samba-97e3e540f72021d81b34f7597506da6cdc552b8a.zip | |
More updates.
(This used to be commit b546de20f793aeec7739ef32451d72582175ae58)
Diffstat (limited to 'docs/smbdotconf/security/forcesecuritymode.xml')
| -rw-r--r-- | docs/smbdotconf/security/forcesecuritymode.xml | 40 |
1 files changed, 23 insertions, 17 deletions
diff --git a/docs/smbdotconf/security/forcesecuritymode.xml b/docs/smbdotconf/security/forcesecuritymode.xml index 98de6fa401..7451ef91ae 100644 --- a/docs/smbdotconf/security/forcesecuritymode.xml +++ b/docs/smbdotconf/security/forcesecuritymode.xml @@ -3,26 +3,32 @@ type="string" xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> <description> - <para>This parameter controls what UNIX permission - bits can be modified when a Windows NT client is manipulating - the UNIX permission on a file using the native NT security dialog - box.</para> + <para> + This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating + the UNIX permission on a file using the native NT security dialog box. + </para> - <para>This parameter is applied as a mask (OR'ed with) to the - changed permission bits, thus forcing any bits in this mask that - the user may have modified to be on. Essentially, one bits in this - mask may be treated as a set of bits that, when modifying security - on a file, the user has always set to be 'on'.</para> + <para> + This parameter is applied as a mask (OR'ed with) to the changed permission bits, thus forcing any bits in this + mask that the user may have modified to be on. Make sure not to mix up this parameter with <smbconfoption + name="security mask"/>, which works similar like this one but uses logical AND instead of OR. + </para> - <para>If not set explicitly this parameter is set to 0, - and allows a user to modify all the user/group/world permissions on a file, - with no restrictions.</para> + <para> + Essentially, one bits in this mask may be treated as a set of bits that, when modifying security on a file, + the user has always set to be on. + </para> + + <para> + If not set explicitly this parameter is set to 0, and allows a user to modify all the user/group/world + permissions on a file, with no restrictions. + </para> - <para><emphasis>Note</emphasis> that users who can access - the Samba server through other means can easily bypass this restriction, - so it is primarily useful for standalone "appliance" systems. - Administrators of most normal systems will probably want to leave - this set to 0000.</para> + <para><emphasis> + Note</emphasis> that users who can access the Samba server through other means can easily bypass this + restriction, so it is primarily useful for standalone "appliance" systems. Administrators of most + normal systems will probably want to leave this set to 0000. + </para> </description> |