1 <samba:parameter name="force security mode"
4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
6 <para>This parameter controls what UNIX permission
7 bits can be modified when a Windows NT client is manipulating
8 the UNIX permission on a file using the native NT security dialog
11 <para>This parameter is applied as a mask (OR'ed with) to the
12 changed permission bits, thus forcing any bits in this mask that
13 the user may have modified to be on. Essentially, one bits in this
14 mask may be treated as a set of bits that, when modifying security
15 on a file, the user has always set to be 'on'.</para>
17 <para>If not set explicitly this parameter is set to 0,
18 and allows a user to modify all the user/group/world permissions on a file,
19 with no restrictions.</para>
21 <para><emphasis>Note</emphasis> that users who can access
22 the Samba server through other means can easily bypass this restriction,
23 so it is primarily useful for standalone "appliance" systems.
24 Administrators of most normal systems will probably want to leave
25 this set to 0000.</para>
29 <value type="default">0</value>
30 <value type="example">700</value>
32 <related>force directory security mode</related>
33 <related>directory security mask</related>
34 <related>security mask</related>