sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00
Code

CVE-2022-38023 docs-xml: improve wording for several options: "takes precedence" -> "overrides"

Browse Source 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Ralph Boehme 2022-12-06 16:00:36 +01:00 committed by Stefan Metzmacher
parent 22128c718c
commit 8ec62694a9
4 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs-xml/smbdotconf/logon/rejectmd5clients.xml
View File

@ -10,7 +10,7 @@
<para>You can set this to yes if all domain members support aes.
This will prevent downgrade attacks.</para>
<para>This option takes precedence to the 'allow nt4 crypto' option.</para>
<para>This option overrides the 'allow nt4 crypto' option.</para>
</description>
<value type="default">no</value>

2
docs-xml/smbdotconf/security/serverschannel.xml
View File

@ -59,7 +59,7 @@
See CVE-2020-1472(ZeroLogon) https://bugzilla.samba.org/show_bug.cgi?id=14497
</para>
<para>This option takes precedence to the <smbconfoption name="server schannel"/> option.</para>
<para>This option overrides the <smbconfoption name="server schannel"/> option.</para>
<programlisting>
server require schannel:LEGACYCOMPUTER1$ = no

2
docs-xml/smbdotconf/winbind/rejectmd5servers.xml
View File

@ -15,7 +15,7 @@
<para>The behavior can be controlled per netbios domain
by using 'reject md5 servers:NETBIOSDOMAIN = yes' as option.</para>
<para>This option takes precedence to the <smbconfoption name="require strong key"/> option.</para>
<para>This option overrides the <smbconfoption name="require strong key"/> option.</para>
</description>
<value type="default">no</value>

2
docs-xml/smbdotconf/winbind/requirestrongkey.xml
View File

@ -19,7 +19,7 @@
<para>This option yields precedence to the <smbconfoption name="reject md5 servers"/> option.</para>
<para>This option takes precedence to the <smbconfoption name="client schannel"/> option.</para>
<para>This option overrides the <smbconfoption name="client schannel"/> option.</para>
</description>
<value type="default">yes</value>