- Timestamp:
- Mar 1, 2010, 3:05:48 PM (15 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.3.x/docs/htmldocs/manpages/smbcacls.1.html
r368 r411 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbcacls</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.7 5.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="smbcacls"><a name="smbcacls.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbcacls — Set or get ACLs on an NT file or directory names</p></div><div class="refsynopsisdiv" title="Synopsis"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbcacls</code> {//server/share} {filename} [-D acls] [-M acls] [-a acls] [-S acls] [-C name] [-G name] [--numeric] [-t] [-U username] [-h] [-d]</p></div></div><div class="refsect1" title="DESCRIPTION"><a name="id2489366"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">smbcacls</code> program manipulates NT Access Control2 Lists (ACLs) on SMB file shares. </p></div><div class="refsect1" title="OPTIONS"><a name="id2489516"></a><h2>OPTIONS</h2><p>The following options are available to the <code class="literal">smbcacls</code> program.1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbcacls</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.74.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbcacls.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbcacls — Set or get ACLs on an NT file or directory names</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbcacls</code> {//server/share} {filename} [-D acls] [-M acls] [-a acls] [-S acls] [-C name] [-G name] [--numeric] [-t] [-U username] [-h] [-d]</p></div></div><div class="refsect1" lang="en"><a name="id2483383"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">smbcacls</code> program manipulates NT Access Control 2 Lists (ACLs) on SMB file shares. </p></div><div class="refsect1" lang="en"><a name="id2483533"></a><h2>OPTIONS</h2><p>The following options are available to the <code class="literal">smbcacls</code> program. 3 3 The format of ACLs is described in the section ACL FORMAT </p><div class="variablelist"><dl><dt><span class="term">-a acls</span></dt><dd><p>Add the ACLs specified to the ACL list. Existing 4 4 access control entries are unchanged. </p></dd><dt><span class="term">-M acls</span></dt><dd><p>Modify the mask value (permissions) for the ACLs … … 53 53 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 54 54 log.smbd, etc...). The log file is never removed by the client. 55 </p></dd></dl></div></div><div class="refsect1" title="ACL FORMAT"><a name="id2487581"></a><h2>ACL FORMAT</h2><p>The format of an ACL is one or more ACL entries separated by55 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2481601"></a><h2>ACL FORMAT</h2><p>The format of an ACL is one or more ACL entries separated by 56 56 either commas or newlines. An ACL entry is one of the following: </p><pre class="programlisting"> 57 57 REVISION:<revision number> … … 71 71 access granted to the SID. </p><p>The type can be either ALLOWED or DENIED to allow/deny access 72 72 to the SID. The flags values are generally zero for file ACLs and 73 either 9 or 2 for directory ACLs. Some common flags are: </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="constant">#define SEC_ACE_FLAG_OBJECT_INHERIT 0x1</code></p></li><li class="listitem"><p><code class="constant">#define SEC_ACE_FLAG_CONTAINER_INHERIT 0x2</code></p></li><li class="listitem"><p><code class="constant">#define SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0x4</code></p></li><li class="listitem"><p><code class="constant">#define SEC_ACE_FLAG_INHERIT_ONLY 0x8</code></p></li></ul></div><p>At present flags can only be specified as decimal or73 either 9 or 2 for directory ACLs. Some common flags are: </p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">#define SEC_ACE_FLAG_OBJECT_INHERIT 0x1</code></p></li><li><p><code class="constant">#define SEC_ACE_FLAG_CONTAINER_INHERIT 0x2</code></p></li><li><p><code class="constant">#define SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0x4</code></p></li><li><p><code class="constant">#define SEC_ACE_FLAG_INHERIT_ONLY 0x8</code></p></li></ul></div><p>At present flags can only be specified as decimal or 74 74 hexadecimal values.</p><p>The mask is a value which expresses the access right 75 75 granted to the SID. It can be given as a decimal or hexadecimal value, 76 76 or by using one of the following text strings which map to the NT 77 file permissions of the same name. </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><span class="emphasis"><em>R</em></span> - Allow read access </p></li><li class="listitem"><p><span class="emphasis"><em>W</em></span> - Allow write access</p></li><li class="listitem"><p><span class="emphasis"><em>X</em></span> - Execute permission on the object</p></li><li class="listitem"><p><span class="emphasis"><em>D</em></span> - Delete the object</p></li><li class="listitem"><p><span class="emphasis"><em>P</em></span> - Change permissions</p></li><li class="listitem"><p><span class="emphasis"><em>O</em></span> - Take ownership</p></li></ul></div><p>The following combined permissions can be specified:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><span class="emphasis"><em>READ</em></span> - Equivalent to 'RX'78 permissions</p></li><li class="listitem"><p><span class="emphasis"><em>CHANGE</em></span> - Equivalent to 'RXWD' permissions79 </p></li><li class="listitem"><p><span class="emphasis"><em>FULL</em></span> - Equivalent to 'RWXDPO'80 permissions</p></li></ul></div></div><div class="refsect1" title="EXIT STATUS"><a name="id2487745"></a><h2>EXIT STATUS</h2><p>The <code class="literal">smbcacls</code> program sets the exit status77 file permissions of the same name. </p><div class="itemizedlist"><ul type="disc"><li><p><span class="emphasis"><em>R</em></span> - Allow read access </p></li><li><p><span class="emphasis"><em>W</em></span> - Allow write access</p></li><li><p><span class="emphasis"><em>X</em></span> - Execute permission on the object</p></li><li><p><span class="emphasis"><em>D</em></span> - Delete the object</p></li><li><p><span class="emphasis"><em>P</em></span> - Change permissions</p></li><li><p><span class="emphasis"><em>O</em></span> - Take ownership</p></li></ul></div><p>The following combined permissions can be specified:</p><div class="itemizedlist"><ul type="disc"><li><p><span class="emphasis"><em>READ</em></span> - Equivalent to 'RX' 78 permissions</p></li><li><p><span class="emphasis"><em>CHANGE</em></span> - Equivalent to 'RXWD' permissions 79 </p></li><li><p><span class="emphasis"><em>FULL</em></span> - Equivalent to 'RWXDPO' 80 permissions</p></li></ul></div></div><div class="refsect1" lang="en"><a name="id2481766"></a><h2>EXIT STATUS</h2><p>The <code class="literal">smbcacls</code> program sets the exit status 81 81 depending on the success or otherwise of the operations performed. 82 82 The exit status may be one of the following values. </p><p>If the operation succeeded, smbcacls returns and exit … … 84 84 or there was an error getting or setting the ACLs, an exit status 85 85 of 1 is returned. If there was an error parsing any command line 86 arguments, an exit status of 2 is returned. </p></div><div class="refsect1" title="VERSION"><a name="id2487778"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" title="AUTHOR"><a name="id2487789"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities86 arguments, an exit status of 2 is returned. </p></div><div class="refsect1" lang="en"><a name="id2481798"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2481809"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 87 87 were created by Andrew Tridgell. Samba is now developed 88 88 by the Samba Team as an Open Source project similar
Note:
See TracChangeset
for help on using the changeset viewer.