summaryrefslogtreecommitdiff
path: root/docs/smbdotconf/security/inheritpermissions.xml
blob: d684ea267324f64970ad765a2deea53271e09408 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
<samba:parameter name="inherit permissions"
                 context="S"
				 type="boolean"
                 xmlns:samba="http://samba.org/common">
<description>
    <para>The permissions on new files and directories 
    are normally governed by <link linkend="CREATEMASK"><parameter moreinfo="none">
    create mask</parameter></link>, <link linkend="DIRECTORYMASK">
    <parameter moreinfo="none">directory mask</parameter></link>, <link linkend="FORCECREATEMODE">
    <parameter moreinfo="none">force create mode</parameter>
    </link> and <link linkend="FORCEDIRECTORYMODE"><parameter moreinfo="none">force 
    directory mode</parameter></link> but the boolean inherit 
    permissions parameter overrides this.</para>
		
    <para>New directories inherit the mode of the parent directory,
    including bits such as setgid.</para>

    <para>New files inherit their read/write bits from the parent 
    directory.  Their execute bits continue to be determined by
    <link linkend="MAPARCHIVE"><parameter moreinfo="none">map archive</parameter>
    </link>, <link linkend="MAPHIDDEN"><parameter moreinfo="none">map hidden</parameter>
    </link> and <link linkend="MAPSYSTEM"><parameter moreinfo="none">map system</parameter>
    </link> as usual.</para>

    <para>Note that the setuid bit is <emphasis>never</emphasis> set via 
    inheritance (the code explicitly prohibits this).</para>

    <para>This can be particularly useful on large systems with 
    many users, perhaps several thousand, to allow a single [homes] 
    share to be used flexibly by each user.</para>
</description>

<related>create mask</related>
<related>directory mask</related>
<related>force create mode</related>
<related>force directory mode</related>

<value type="default">no</value>
</samba:parameter>