aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFrederic Lepied <flepied@mandriva.com>2004-02-27 11:41:43 +0000
committerFrederic Lepied <flepied@mandriva.com>2004-02-27 11:41:43 +0000
commit255073d6cdaefe76b7796d5c56abb5bb7e90d074 (patch)
treebb0a0206e2d09c537d71a14de28764f81dc2ef27
parent4124f22b97db20f5a31a338c7f679a49fdf56ffa (diff)
downloadmsec-255073d6cdaefe76b7796d5c56abb5bb7e90d074.tar
msec-255073d6cdaefe76b7796d5c56abb5bb7e90d074.tar.gz
msec-255073d6cdaefe76b7796d5c56abb5bb7e90d074.tar.bz2
msec-255073d6cdaefe76b7796d5c56abb5bb7e90d074.tar.xz
msec-255073d6cdaefe76b7796d5c56abb5bb7e90d074.zip
document perm file syntax
-rw-r--r--share/README16
1 files changed, 15 insertions, 1 deletions
diff --git a/share/README b/share/README
index a7ad9ac..e323b70 100644
--- a/share/README
+++ b/share/README
@@ -67,5 +67,19 @@ sent to root.
PERM_LEVEL is used to determine which file to use to fix
permissions/owners/groups (from /usr/share/msec/perm.$PERM_LEVEL). If
not set, the SECURE_LEVEL is used instead. If the file
-/etc/security/msec/perm.local exists, it's used too.
+/etc/security/msec/perm.local exists, it's used too. The syntax for
+each line if the following:
+<file specification> <owner> <permission> [force]
+
+<file specification> can be any glob to specify one or multiple
+files/diretories.
+
+<owner> must be in the form <user>.<group> or <user>. (force only
+user) or .<group> (force only group) or current (keep current user and
+group).
+
+<permission> is an octal number representing the access rights.
+
+If force is present as a 4th argument, it means that msec will enforce
+the permission even if the previous permission was lower.