1 files changed, 40 insertions, 0 deletions
diff --git a/docs/docbook/smbdotconf/security/inheritpermissions.xml b/docs/docbook/smbdotconf/security/inheritpermissions.xml
new file mode 100644
index 0000000000..aacf169863
--- /dev/null
+++ b/docs/docbook/smbdotconf/security/inheritpermissions.xml
@@ -0,0 +1,40 @@
+<samba:parameter name="inherit permissions"
+                 context="S"
+                 xmlns:samba="http://samba.org/common">
+<listitem>
+    <para>The permissions on new files and directories 
+    are normally governed by <link linkend="CREATEMASK"><parameter moreinfo="none">
+    create mask</parameter></link>, <link linkend="DIRECTORYMASK">
+    <parameter moreinfo="none">directory mask</parameter></link>, <link linkend="FORCECREATEMODE">
+    <parameter moreinfo="none">force create mode</parameter>
+    </link> and <link linkend="FORCEDIRECTORYMODE"><parameter moreinfo="none">force 
+    directory mode</parameter></link> but the boolean inherit 
+    permissions parameter overrides this.</para>
+		
+    <para>New directories inherit the mode of the parent directory,
+    including bits such as setgid.</para>
+
+    <para>New files inherit their read/write bits from the parent 
+    directory.  Their execute bits continue to be determined by
+    <link linkend="MAPARCHIVE"><parameter moreinfo="none">map archive</parameter>
+    </link>, <link linkend="MAPHIDDEN"><parameter moreinfo="none">map hidden</parameter>
+    </link> and <link linkend="MAPSYSTEM"><parameter moreinfo="none">map system</parameter>
+    </link> as usual.</para>
+
+    <para>Note that the setuid bit is <emphasis>never</emphasis> set via 
+    inheritance (the code explicitly prohibits this).</para>
+
+    <para>This can be particularly useful on large systems with 
+    many users, perhaps several thousand, to allow a single [homes] 
+    share to be used flexibly by each user.</para>
+		
+    <para>See also <link linkend="CREATEMASK"><parameter moreinfo="none">create mask
+    </parameter></link>, <link linkend="DIRECTORYMASK"><parameter moreinfo="none">
+    directory mask</parameter></link>, <link linkend="FORCECREATEMODE">
+    <parameter moreinfo="none">force create mode</parameter></link> and <link linkend="FORCEDIRECTORYMODE">
+    <parameter moreinfo="none">force directory mode</parameter>
+    </link>.</para>
+
+    <para>Default: <command moreinfo="none">inherit permissions = no</command></para>
+</listitem>
+</samba:parameter>