diff options
| -rw-r--r-- | share/README | 16 |
1 files changed, 15 insertions, 1 deletions
diff --git a/share/README b/share/README index a7ad9ac..e323b70 100644 --- a/share/README +++ b/share/README @@ -67,5 +67,19 @@ sent to root. PERM_LEVEL is used to determine which file to use to fix permissions/owners/groups (from /usr/share/msec/perm.$PERM_LEVEL). If not set, the SECURE_LEVEL is used instead. If the file -/etc/security/msec/perm.local exists, it's used too. +/etc/security/msec/perm.local exists, it's used too. The syntax for +each line if the following: +<file specification> <owner> <permission> [force] + +<file specification> can be any glob to specify one or multiple +files/diretories. + +<owner> must be in the form <user>.<group> or <user>. (force only +user) or .<group> (force only group) or current (keep current user and +group). + +<permission> is an octal number representing the access rights. + +If force is present as a 4th argument, it means that msec will enforce +the permission even if the previous permission was lower. |