summaryrefslogtreecommitdiff
path: root/docs-xml
diff options
context:
space:
mode:
authorPavel Filipenský <pfilipen@redhat.com>2021-05-19 15:10:36 +0200
committerKarolin Seeger <kseeger@samba.org>2021-05-26 11:43:31 +0000
commit46cf8514c76eb32b51a41c13fe461739c995839a (patch)
treeb7c129b40a84505a638088b63cec65b1eb6f57c8 /docs-xml
parentc58029aa27436114d5ed7f7b682e544f4d2542b3 (diff)
downloadsamba-46cf8514c76eb32b51a41c13fe461739c995839a.tar.gz
docs-xml: Update smbcacls manpage
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14718 Signed-off-by: Pavel Filipenský <pfilipen@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 9d9ed421b26f733c59f9fac44e2034df704cef6a)
Diffstat (limited to 'docs-xml')
-rw-r--r--docs-xml/manpages/smbcacls.1.xml22
1 files changed, 22 insertions, 0 deletions
diff --git a/docs-xml/manpages/smbcacls.1.xml b/docs-xml/manpages/smbcacls.1.xml
index 7efcc087cfd..d10a0b0403d 100644
--- a/docs-xml/manpages/smbcacls.1.xml
+++ b/docs-xml/manpages/smbcacls.1.xml
@@ -228,6 +228,27 @@ GROUP:&lt;sid or name&gt;
ACL:&lt;sid or name&gt;:&lt;type&gt;/&lt;flags&gt;/&lt;mask&gt;
</programlisting></para>
+ <para>Control bits related to automatic inheritance</para>
+
+
+ <itemizedlist>
+ <listitem><para><emphasis>OD</emphasis> - "Owner Defaulted" - Indicates that the SID of the owner of the security descriptor was provided by a default mechanism.</para></listitem>
+ <listitem><para><emphasis>GD</emphasis> - "Group Defaulted" - Indicates that the SID of the security descriptor group was provided by a default mechanism.</para></listitem>
+ <listitem><para><emphasis>DP</emphasis> - "DACL Present" - Indicates a security descriptor that has a discretionary access control list (DACL).</para></listitem>
+ <listitem><para><emphasis>DD</emphasis> - "DACL Defaulted" - Indicates a security descriptor with a default DACL.</para></listitem>
+ <listitem><para><emphasis>SP</emphasis> - "SACL Present" - Indicates a security descriptor that has a system access control list (SACL).</para></listitem>
+ <listitem><para><emphasis>SD</emphasis> - "SACL Defaulted" - A default mechanism, rather than the original provider of the security descriptor, provided the SACL.</para></listitem>
+ <listitem><para><emphasis>DT</emphasis> - "DACL Trusted"</para></listitem>
+ <listitem><para><emphasis>SS</emphasis> - "Server Security"</para></listitem>
+ <listitem><para><emphasis>DR</emphasis> - "DACL Inheritance Required" - Indicates a required security descriptor in which the DACL is set up to support automatic propagation of inheritable access control entries (ACEs) to existing child objects.</para></listitem>
+ <listitem><para><emphasis>SR</emphasis> - "SACL Inheritance Required" - Indicates a required security descriptor in which the SACL is set up to support automatic propagation of inheritable ACEs to existing child objects.</para></listitem>
+ <listitem><para><emphasis>DI</emphasis> - "DACL Auto Inherited" - Indicates a security descriptor in which the DACL is set up to support automatic propagation of inheritable access control entries (ACEs) to existing child objects.</para></listitem>
+ <listitem><para><emphasis>SI</emphasis> - "SACL Auto Inherited" - Indicates a security descriptor in which the SACL is set up to support automatic propagation of inheritable ACEs to existing child objects.</para></listitem>
+ <listitem><para><emphasis>PD</emphasis> - "DACL Protected" - Prevents the DACL of the security descriptor from being modified by inheritable ACEs.</para></listitem>
+ <listitem><para><emphasis>PS</emphasis> - "SACL Protected" - Prevents the SACL of the security descriptor from being modified by inheritable ACEs.</para></listitem>
+ <listitem><para><emphasis>RM</emphasis> - "RM Control Valid" - Indicates that the resource manager control is valid.</para></listitem>
+ <listitem><para><emphasis>SR</emphasis> - "Self Relative" - Indicates a self-relative security descriptor.</para></listitem>
+ </itemizedlist>
<para>The revision of the ACL specifies the internal Windows
NT ACL revision for the security descriptor.
@@ -260,6 +281,7 @@ ACL:&lt;sid or name&gt;:&lt;type&gt;/&lt;flags&gt;/&lt;mask&gt;
<listitem><para><emphasis>(CI)</emphasis> Container Inherit 0x2</para></listitem>
<listitem><para><emphasis>(NP)</emphasis> No Propagate Inherit 0x4</para></listitem>
<listitem><para><emphasis>(IO)</emphasis> Inherit Only 0x8</para></listitem>
+ <listitem><para><emphasis>(I)</emphasis> ACE was inherited 0x10</para></listitem>
</itemizedlist>