Hmmm. I don't know if there's a way to do this in smb.conf. Maybe
somebody else knows. Failing that, if it's appropriate to your
environtment, you can have a unix user own the files (who never logs on as a
windows user) and set the inherit owner option in the smb.conf file. That's
a lousy solution if you actually need to have people owning their own files
though. Is it even possible to do this under Windows natively?
I completely understand why you want to do this, Windows ACLs vs Unix ACLs and
perms quickly get nasty.
If you're on a filesystem that supports NFS v4 ACLs (rare enough, I know),
could you remove WRITE_DACL permission from the owner's ACE?
~Eric
-----Original Message-----
From: Jan Patrick L?bbert [mailto:mailinglist@jpluebbert.de]
Sent: Monday, June 16, 2008 10:49 AM
To: Eric Diven
Subject: Re: [Samba] Restrict permission changes
No, both of them off. Only the owner can change permissions, that's right,
but I want to restrict it so nobody is able to change them.
Jan
> -----Original Message-----
> Do you have acl group control = yes or dos filemode = yes in your smb.conf?
> By default only the owner of the files should be able to change
permissions. Either of these affect that.
> ~Eric
> -----Original Message-----
> From: samba-bounces+eric.diven=edsiohio.com@lists.samba.org
> [mailto:samba-bounces+eric.diven=edsiohio.com@lists.samba.org] On
> Behalf Of Jan Patrick L?bbert
> Sent: Monday, June 16, 2008 9:33 AM
> To: samba@lists.samba.org
> Subject: [Samba] Restrict permission changes
> Hello,
> I've a share with preset permissions on different directories including
acls.
> So in one folder for example users can only read and into other read and
write.
> Everything works fine. The Problem is if one user decides to change
> the permission of a file or directory (via Windows) the acls and
permissions get are messed up.
> How can I restrict users from changing permission on a share? I tried
> "security mode" and "force security mode", but the acls
alsways get deleted.
> Thanks
> Jan
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
--
Mit freundlichen Gr?ssen
Jan Patrick L?bbert mailto:mailinglist@jpluebbert.de