summaryrefslogtreecommitdiffstats
path: root/docs-xml/smbdotconf/security/securitymask.xml
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2012-10-03 16:04:18 -0700
committerJeremy Allison <jra@samba.org>2012-10-04 12:04:21 -0700
commitdb62a159b8833a4f1aee0c9733fd263b6d239d53 (patch)
treefd4ee8ba99f892a13b7c3e3fd3ff14d7c3752973 /docs-xml/smbdotconf/security/securitymask.xml
parent7622aa16adeb00bf161a6dd07664c37125391272 (diff)
downloadsamba-db62a159b8833a4f1aee0c9733fd263b6d239d53.tar.gz
samba-db62a159b8833a4f1aee0c9733fd263b6d239d53.tar.xz
samba-db62a159b8833a4f1aee0c9733fd263b6d239d53.zip
Remove the parameters:
security mask force security mode directory security mask force directory security mode and update the docs.
Diffstat (limited to 'docs-xml/smbdotconf/security/securitymask.xml')
-rw-r--r--docs-xml/smbdotconf/security/securitymask.xml33
1 files changed, 3 insertions, 30 deletions
diff --git a/docs-xml/smbdotconf/security/securitymask.xml b/docs-xml/smbdotconf/security/securitymask.xml
index 23bc2808db4..d1e78bedfd5 100644
--- a/docs-xml/smbdotconf/security/securitymask.xml
+++ b/docs-xml/smbdotconf/security/securitymask.xml
@@ -4,36 +4,9 @@
xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
<para>
- This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the
- UNIX permission on a file using the native NT security dialog box.
- </para>
-
- <para>
- This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus resetting
- any bits not in this mask. Make sure not to mix up this parameter with <smbconfoption name="force
- security mode"/>, which works in a manner similar to this one but uses a logical OR instead of an AND.
- </para>
-
- <para>
- Essentially, all bits set to zero in this mask will result in setting to zero the corresponding bits on the
- file permissions regardless of the previous status of this bits on the file.
- </para>
-
- <para>
- If not set explicitly this parameter is 0777, allowing a user to set all the user/group/world permissions on a file.
+ This parameter has been removed for Samba 4.0.0. The parameter
+ <smbconfoption name="create mask"/> is now used instead to mask
+ any permission bit changes on files.
</para>
-
- <para><emphasis>
- Note</emphasis> that users who can access the Samba server through other means can easily bypass this
- restriction, so it is primarily useful for standalone &quot;appliance&quot; systems. Administrators of
- most normal systems will probably want to leave it set to <constant>0777</constant>.
- </para>
</description>
-
-<related>force directory security mode</related>
-<related>directory security mask</related>
-<related>force security mode</related>
-
-<value type="default">0777</value>
-<value type="example">0770</value>
</samba:parameter>