From cc51cbc862055975bcef016876662576b00e72ef Mon Sep 17 00:00:00 2001 From: Karolin Seeger Date: Mon, 9 Feb 2009 21:00:47 +0100 Subject: docs: Add man sharesec. Karolin --- docs-xml/manpages-3/sharesec.1.xml | 220 +++++++++++++++++++++++++++++++++++++ 1 file changed, 220 insertions(+) create mode 100644 docs-xml/manpages-3/sharesec.1.xml (limited to 'docs-xml/manpages-3') diff --git a/docs-xml/manpages-3/sharesec.1.xml b/docs-xml/manpages-3/sharesec.1.xml new file mode 100644 index 0000000000..d8ac510b69 --- /dev/null +++ b/docs-xml/manpages-3/sharesec.1.xml @@ -0,0 +1,220 @@ + + + + + + sharesec + 1 + Samba + User Commands + 3.3 + + + + + sharesec + Set or get share ACLs + + + + + sharesec + sharename + -r, --remove=ACL + -m, --modify=ACL + -a, --add=ACL + -R, --replace=ACLs + -D, --delete + -v, --view + -M, --machine-sid + -F, --force + -d, --debuglevel=DEBUGLEVEL + -s, --configfile=CONFIGFILE + -l, --log-basename=LOGFILEBASE + -V, --version + -?, --help + --usage + + + + + DESCRIPTION + + This tool is part of the samba + 7 suite. + + The sharesec program manipulates share permissions + on SMB file shares. + + + + + OPTIONS + + The following options are available to the sharesec program. + The format of ACLs is described in the section ACL FORMAT + + + + -a|--add=ACL + Add the ACEs specified to the ACL list. + + + + + -D|--delete + Delete the entire security descriptor. + + + + + -F|--force + Force storing the ACL. + + + + + -m|--modify=ACL + Modify existing ACEs. + + + + + -M|--machine-sid + Initialize the machine SID. + + + + + -r|--remove=ACL + Remove ACEs. + + + + + -R|--replace=ACLS + + Overwrite an existing share permission ACL. + + + + &stdarg.help; + &stdarg.server.debug; + &popt.common.samba; + + + + + + ACL FORMAT + + The format of an ACL is one or more ACL entries separated by + either commas or newlines. An ACL entry is one of the following: + + + REVISION:<revision number> + OWNER:<sid or name> + GROUP:<sid or name> + ACL:<sid or name>:<type>/<flags>/<mask> + + + The revision of the ACL specifies the internal Windows + NT ACL revision for the security descriptor. + If not specified it defaults to 1. Using values other than 1 may + cause strange behaviour. + + The owner and group specify the owner and group SIDs for the + object. If a SID in the format S-1-x-y-z is specified this is used, + otherwise the name specified is resolved using the server on which + the file or directory resides. + + ACLs specify permissions granted to the SID. This SID + can be specified in S-1-x-y-z format or as a name in which case + it is resolved against the server on which the file or directory + resides. The type, flags and mask values determine the type of + access granted to the SID. + + The type can be either ALLOWED or DENIED to allow/deny access + to the SID. The flags values are generally zero for share ACLs. + + + The mask is a value which expresses the access right + granted to the SID. It can be given as a decimal or hexadecimal value, + or by using one of the following text strings which map to the NT + file permissions of the same name. + + + R - Allow read access + W - Allow write access + X - Execute permission on the object + D - Delete the object + P - Change permissions + O - Take ownership + + + The following combined permissions can be specified: + + + READ - Equivalent to 'RX' + permissions + CHANGE - Equivalent to 'RXWD' permissions + + FULL - Equivalent to 'RWXDPO' + permissions + + + + + EXIT STATUS + + The sharesec program sets the exit status + depending on the success or otherwise of the operations performed. + The exit status may be one of the following values. + + If the operation succeeded, sharesec returns and exit + status of 0. If sharesec couldn't connect to the specified server, + or there was an error getting or setting the ACLs, an exit status + of 1 is returned. If there was an error parsing any command line + arguments, an exit status of 2 is returned. + + + + EXAMPLES + + Add full access for SID + S-1-5-21-1866488690-1365729215-3963860297-17724 on + share: + + + + host:~ # sharesec share -a S-1-5-21-1866488690-1365729215-3963860297-17724:ALLOWED/0/FULL + + + List all ACEs for share: + + + + host:~ # sharesec share -v + REVISION:1 + OWNER:(NULL SID) + GROUP:(NULL SID) + ACL:S-1-1-0:ALLOWED/0/0x101f01ff + ACL:S-1-5-21-1866488690-1365729215-3963860297-17724:ALLOWED/0/FULL + + + + + VERSION + + This man page is correct for version 3 of the Samba suite. + + + + AUTHOR + The original Samba software and related utilities + were created by Andrew Tridgell. Samba is now developed + by the Samba Team as an Open Source project similar + to the way the Linux kernel is developed. + + + -- cgit