diff options
| author | Ralph Boehme <slow@samba.org> | 2016-08-26 10:04:53 +0200 |
|---|---|---|
| committer | Ralph Boehme <slow@samba.org> | 2016-08-31 18:41:20 +0200 |
| commit | b72287514cc78c9019db7385af4c9b9d94f60894 (patch) | |
| tree | b421b812d5632c60d469aa09761180efae446441 /docs-xml | |
| parent | cbe8f0d63b90e4380da35e9f9f5a05d8ccc2058b (diff) | |
| download | samba-b72287514cc78c9019db7385af4c9b9d94f60894.tar.gz | |
vfs_acl_xattr|tdb: enforced settings when ignore system acls=yes
When "ignore system acls" is set to "yes, we need to ensure filesystem
permission always grant access so that when doing our own access checks
we don't run into situations where we grant access but the filesystem
doesn't.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=12181
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Wed Aug 31 18:41:20 CEST 2016 on sn-devel-144
Diffstat (limited to 'docs-xml')
| -rw-r--r-- | docs-xml/manpages/vfs_acl_tdb.8.xml | 15 | ||||
| -rw-r--r-- | docs-xml/manpages/vfs_acl_xattr.8.xml | 15 |
2 files changed, 30 insertions, 0 deletions
diff --git a/docs-xml/manpages/vfs_acl_tdb.8.xml b/docs-xml/manpages/vfs_acl_tdb.8.xml index 68e41797aad..2510f0804a1 100644 --- a/docs-xml/manpages/vfs_acl_tdb.8.xml +++ b/docs-xml/manpages/vfs_acl_tdb.8.xml @@ -70,6 +70,21 @@ access the data via Samba you might set this to yes to achieve better NT ACL compatibility. </para> + + <para> + If <emphasis>acl_tdb:ignore system acls</emphasis> + is set to <emphasis>yes</emphasis>, the following + additional settings will be enforced: + <itemizedlist> + <listitem><para>create mask = 0666</para></listitem> + <listitem><para>directory mask = 0777</para></listitem> + <listitem><para>map archive = no</para></listitem> + <listitem><para>map hidden = no</para></listitem> + <listitem><para>map readonly = no</para></listitem> + <listitem><para>map system = no</para></listitem> + <listitem><para>store dos attributes = yes</para></listitem> + </itemizedlist> + </para> </listitem> </varlistentry> diff --git a/docs-xml/manpages/vfs_acl_xattr.8.xml b/docs-xml/manpages/vfs_acl_xattr.8.xml index 8396ced4e48..9d212900871 100644 --- a/docs-xml/manpages/vfs_acl_xattr.8.xml +++ b/docs-xml/manpages/vfs_acl_xattr.8.xml @@ -74,6 +74,21 @@ access the data via Samba you might set this to yes to achieve better NT ACL compatibility. </para> + + <para> + If <emphasis>acl_xattr:ignore system acls</emphasis> + is set to <emphasis>yes</emphasis>, the following + additional settings will be enforced: + <itemizedlist> + <listitem><para>create mask = 0666</para></listitem> + <listitem><para>directory mask = 0777</para></listitem> + <listitem><para>map archive = no</para></listitem> + <listitem><para>map hidden = no</para></listitem> + <listitem><para>map readonly = no</para></listitem> + <listitem><para>map system = no</para></listitem> + <listitem><para>store dos attributes = yes</para></listitem> + </itemizedlist> + </para> </listitem> </varlistentry> |