sharesec

Name

sharesec — Set or get share ACLs

Synopsis

sharesec {sharename} [-r, --remove=ACL] [-m, --modify=ACL] [-a, --add=ACL] [-R, --replace=ACLs] [-D, --delete] [-v, --view] [-M, --machine-sid] [-F, --force] [-d, --debuglevel=DEBUGLEVEL] [-s, --configfile=CONFIGFILE] [-l, --log-basename=LOGFILEBASE] [-V, --version] [-?, --help] [--usage]

DESCRIPTION

This tool is part of the samba(7) suite.

The sharesec program manipulates share permissions - on SMB file shares.

OPTIONS

The following options are available to the sharesec program. +sharesec

Name

sharesec — Set or get share ACLs

Synopsis

DESCRIPTION

This tool is part of the samba(7) suite.

The sharesec program manipulates share permissions + on SMB file shares.

OPTIONS

The following options are available to the sharesec program. The format of ACLs is described in the section ACL FORMAT

-a|--add=ACL: Add the ACEs specified to the ACL list.
-D|--delete: Delete the entire security descriptor.
-F|--force: Force storing the ACL. @@ -33,7 +33,7 @@ The default configuration file name is determined at compile time.
-l|--log-basename=logdirectory: Base directory name for log/debug files. The extension ".progname" will be appended (e.g. log.smbclient, log.smbd, etc...). The log file is never removed by the client. -

ACL FORMAT

The format of an ACL is one or more ACL entries separated by +

ACL FORMAT

The format of an ACL is one or more ACL entries separated by either commas or newlines. An ACL entry is one of the following:

 	REVISION:<revision number>
 	OWNER:<sid or name>
@@ -54,16 +54,16 @@ log.smbd, etc...). The log file is never removed by the client.
 	
The mask is a value which expresses the access right
 	granted to the SID. It can be given as a decimal or hexadecimal value,
 	or by using one of the following text strings which map to the NT
-	file permissions of the same name.
R - Allow read access 
W - Allow write access
X - Execute permission on the object
D - Delete the object
P - Change permissions
O - Take ownership
The following combined permissions can be specified:
READ -  Equivalent to 'RX'
-		permissions
CHANGE - Equivalent to 'RXWD' permissions
-		
FULL - Equivalent to 'RWXDPO'
-		permissions

EXIT STATUS

The sharesec program sets the exit status + file permissions of the same name.

R - Allow read access
W - Allow write access
X - Execute permission on the object
D - Delete the object
P - Change permissions
O - Take ownership

The following combined permissions can be specified:

READ - Equivalent to 'RX' + permissions
CHANGE - Equivalent to 'RXWD' permissions +
FULL - Equivalent to 'RWXDPO' + permissions

EXIT STATUS

The sharesec program sets the exit status depending on the success or otherwise of the operations performed. The exit status may be one of the following values.

If the operation succeeded, sharesec returns and exit status of 0. If sharesec couldn't connect to the specified server, or there was an error getting or setting the ACLs, an exit status of 1 is returned. If there was an error parsing any command line - arguments, an exit status of 2 is returned.

EXAMPLES

Add full access for SID + arguments, an exit status of 2 is returned.

EXAMPLES

Add full access for SID S-1-5-21-1866488690-1365729215-3963860297-17724 on share:

@@ -76,7 +76,7 @@ log.smbd, etc...). The log file is never removed by the client.
 	GROUP:(NULL SID)
 	ACL:S-1-1-0:ALLOWED/0/0x101f01ff
 	ACL:S-1-5-21-1866488690-1365729215-3963860297-17724:ALLOWED/0/FULL
-

VERSION

This man page is correct for version 3 of the Samba suite.

AUTHOR

The original Samba software and related utilities +

VERSION

This man page is correct for version 3 of the Samba suite.

AUTHOR

The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.

-- cgit v1.2.3