diff options
| -rw-r--r-- | docs/smbdotconf/logon/enableprivileges.xml | 26 |
1 files changed, 14 insertions, 12 deletions
diff --git a/docs/smbdotconf/logon/enableprivileges.xml b/docs/smbdotconf/logon/enableprivileges.xml index 99d0ca4348..aedd4c8f98 100644 --- a/docs/smbdotconf/logon/enableprivileges.xml +++ b/docs/smbdotconf/logon/enableprivileges.xml @@ -4,20 +4,22 @@ advanced="1" developer="1" xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> <description> - <para>This parameter controls whether or not smbd will honor - privileges assigned to specific SIDs via either <command>net rpc rights</command> - or one of the Windows user and group manager tools. This parameter is - disabled by default to prevent members of the Domain Admins group from - being able to assign privileges to users or groups which can then result in certain - smbd operations running as root that would normally run under the context - of the connected user. </para> + <para> + This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either + <command>net rpc rights</command> or one of the Windows user and group manager tools. This parameter is + enabled by default. It can be disabled to prevent members of the Domain Admins group from being able to + assign privileges to users or groups which can then result in certain smbd operations running as root that + would normally run under the context of the connected user. + </para> - <para>An example of how privileges can be used is to assign - the right to join clients to a Samba controlled domain without - providing root access to the server via smbd.</para> + <para> + An example of how privileges can be used is to assign the right to join clients to a Samba controlled + domain without providing root access to the server via smbd. + </para> - <para>Please read the extended description provided in the - Samba documentation.</para> + <para> + Please read the extended description provided in the Samba HOWTO documentation. + </para> </description> <value type="default">yes</value> |