svn commit: samba-docs r1166 - in trunk/smbdotconf/security: .

[idra at samba.org]

Author: idra
Date: 2007-08-23 20:43:59 +0000 (Thu, 23 Aug 2007)
New Revision: 1166

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-docs&rev=1166

Log:

Explain better what happens when you set to 0 these bits.


Modified:
   trunk/smbdotconf/security/directorysecuritymask.xml
   trunk/smbdotconf/security/securitymask.xml


Changeset:
Modified: trunk/smbdotconf/security/directorysecuritymask.xml
===================================================================
--- trunk/smbdotconf/security/directorysecuritymask.xml	2007-08-23 19:50:44 UTC (rev 1165)
+++ trunk/smbdotconf/security/directorysecuritymask.xml	2007-08-23 20:43:59 UTC (rev 1166)
@@ -3,18 +3,23 @@
 				 type="string"
                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
 <description>
-    <para>This parameter controls what UNIX permission bits 
-    can be set when a Windows NT client is manipulating the UNIX 
-    permission on a directory using the native NT security dialog 
+    <para>This parameter controls what UNIX permission bits
+    will be set when a Windows NT client is manipulating the UNIX
+    permission on a directory using the native NT security dialog
     box.</para>
 
     <para>
-	This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus preventing any bits not
-	in this mask from being set.  Make sure not to mix up this parameter with <smbconfoption name="force
+	This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus resetting
+        any bits not in this mask.  Make sure not to mix up this parameter with <smbconfoption name="force
 	directory security mode"/>, which works similar like this one but uses logical OR instead of AND.
 	Essentially, zero bits in this mask are a set of bits that will always be set to zero.
 	</para>
 
+    <para>
+	Essentially, all bits set to zero in this mask will result in setting to zero the corresponding bits on the
+	file permissions regardless of the previous status of this bits on the file.
+    </para>
+
     <para>If not set explicitly this parameter is set to 0777
     meaning a user is allowed to set all the user/group/world
     permissions on a directory.</para>

Modified: trunk/smbdotconf/security/securitymask.xml
===================================================================
--- trunk/smbdotconf/security/securitymask.xml	2007-08-23 19:50:44 UTC (rev 1165)
+++ trunk/smbdotconf/security/securitymask.xml	2007-08-23 20:43:59 UTC (rev 1166)
@@ -4,19 +4,20 @@
                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
 <description>
     <para>
-	This parameter controls what UNIX permission bits can be set when a Windows NT client is manipulating the
+	This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the
 	UNIX permission on a file using the native NT security dialog box.
 	</para>
 
     <para>
-	This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus preventing any bits not
-	in this mask from being set.  Make sure not to mix up this parameter with <smbconfoption name="force
+	This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus resetting
+	any bits not in this mask. Make sure not to mix up this parameter with <smbconfoption name="force
 	security mode"/>, which works in a manner similar to this one but uses a logical OR instead of an AND. 
 	</para>
 
-	<para>
-	Essentially, zero bits in this mask are a set of bits that will always be set to zero.
-	</para>
+    <para>
+	Essentially, all bits set to zero in this mask will result in setting to zero the corresponding bits on the
+	file permissions regardless of the previous status of this bits on the file.
+    </para>
 
     <para>
 	If not set explicitly this parameter is 0777, allowing a user to set all the user/group/world permissions on a file.