|
|
97823b |
From b54e00beddd4343e746c7ead585ef607dbf48cff Mon Sep 17 00:00:00 2001
|
|
|
97823b |
From: Uri Simchoni <urisimchoni@gmail.com>
|
|
|
97823b |
Date: Thu, 19 Nov 2015 21:48:15 +0200
|
|
|
97823b |
Subject: [PATCH 4/5] manpage: clarify use of backupuid and backupgid in
|
|
|
97823b |
mount.cifs.8
|
|
|
97823b |
|
|
|
97823b |
Assert that backup intent shall only be attempted if the user matches
|
|
|
97823b |
the backupuid or backupgid parameter.
|
|
|
97823b |
|
|
|
97823b |
Signed-off-by: Uri Simchoni <uri@samba.org>
|
|
|
97823b |
Signed-off-by: Jeff Layton <jlayton@samba.org>
|
|
|
97823b |
(cherry picked from commit dd13ac8a25d409a0d3d068b5b2b96f921f2613f2)
|
|
|
97823b |
Signed-off-by: Sachin Prabhu <sprabhu@redhat.com>
|
|
|
97823b |
---
|
|
|
97823b |
mount.cifs.8 | 6 +++---
|
|
|
97823b |
1 file changed, 3 insertions(+), 3 deletions(-)
|
|
|
97823b |
|
|
|
97823b |
diff --git a/mount.cifs.8 b/mount.cifs.8
|
|
|
97823b |
index 2643145..af6b097 100644
|
|
|
97823b |
--- a/mount.cifs.8
|
|
|
97823b |
+++ b/mount.cifs.8
|
|
|
97823b |
@@ -310,14 +310,14 @@ for more information\&.
|
|
|
97823b |
.PP
|
|
|
97823b |
backupuid=\fIarg\fR
|
|
|
97823b |
.RS 4
|
|
|
97823b |
-Restrict access to files with the backup intent to a user. Either a name or an id must be provided as an argument, there are no default values.
|
|
|
97823b |
+File access by this user shall be done with the backup intent flag set. Either a name or an id must be provided as an argument, there are no default values.
|
|
|
97823b |
.sp
|
|
|
97823b |
See section \fIACCESSING FILES WITH BACKUP INTENT\fR for more details
|
|
|
97823b |
.RE
|
|
|
97823b |
.PP
|
|
|
97823b |
backupgid=\fIarg\fR
|
|
|
97823b |
.RS 4
|
|
|
97823b |
-Restrict access to files with the backup intent to a group. Either a name or an id must be provided as an argument, there are no default values.
|
|
|
97823b |
+File access by users who are members of this group shall be done with the backup intent flag set. Either a name or an id must be provided as an argument, there are no default values.
|
|
|
97823b |
.sp
|
|
|
97823b |
See section \fIACCESSING FILES WITH BACKUP INTENT\fR for more details
|
|
|
97823b |
.RE
|
|
|
97823b |
@@ -767,7 +767,7 @@ But the user testuser, if it becomes part of the group Backup Operators, can ope
|
|
|
97823b |
Any user on the client side who can authenticate as such a user on the server,
|
|
|
97823b |
can access the files with the backup intent. But it is desirable and preferable for security reasons amongst many, to restrict this special right.
|
|
|
97823b |
|
|
|
97823b |
-The mount option backupuid is used to restrict this special right to a user which is specified by either a name or an id. The mount option backupgid is used to restrict this special right to the users in a group which is specified by either a name or an id. These two mount options can be used together.
|
|
|
97823b |
+The mount option backupuid is used to restrict this special right to a user which is specified by either a name or an id. The mount option backupgid is used to restrict this special right to the users in a group which is specified by either a name or an id. Only users maching either backupuid or backupgid shall attempt to access files with backup intent. These two mount options can be used together.
|
|
|
97823b |
.SH "FILE AND DIRECTORY OWNERSHIP AND PERMISSIONS"
|
|
|
97823b |
.PP
|
|
|
97823b |
The core CIFS protocol does not provide unix ownership information or mode for files and directories\&. Because of this, files and directories will generally appear to be owned by whatever values the uid= or gid= options are set, and will have permissions set to the default file_mode and dir_mode for the mount\&. Attempting to change these values via chmod/chown will return success but have no effect\&.
|
|
|
97823b |
--
|
|
|
97823b |
2.5.5
|
|
|
97823b |
|