diff --git a/docs/deployment/configuration.md b/docs/deployment/configuration.md index 27e91d7b7..64500470e 100644 --- a/docs/deployment/configuration.md +++ b/docs/deployment/configuration.md @@ -81,7 +81,7 @@ also known as mobileconfig files, which are in an Apple-specific XML format. | RemountUSBBlockMessage | String | Message to display when a USB device is allowed to be mounted with a subset of the requested flags as defined by `RemountUSBMode`. | | FileAccessPolicyPlist | String | Path to a file access configuration plist. This is ignored if `FileAccessPolicy` is also set. | | FileAccessPolicy | Dictionary | A complete file access configuration policy embedded in the main Santa config. If set, `FileAccessPolicyPlist` will be ignored. | -| FileAccessPolicyUpdateIntervalSec | Integer | Number of seconds between re-reading the file access policy config and policies/monitored paths updated. | +| FileAccessPolicyUpdateIntervalSec | Integer | Number of seconds between re-reading the file access policy config and updating policies/monitored paths. Minimum value is 15 seconds. This value is only read once when santad starts. Defaults to 600 seconds (10 minutes). | | FileAccessBlockMessage | String | This is the message shown to the user when a access to a file is blocked because of a rule defined by `FileAccessPolicy` if that rule doesn't provide a custom message. If this is not configured a reasonable default is provided. | | OverrideFileAccessAction | String | Defines a global override policy that applies to the enforcement of all `FileAccessPolicy` rules. Allowed values are: `AUDIT_ONLY` (no access will be blocked, only logged), `DISABLE` (no access will be blocked or logged), `none` (enforce policy as defined in each rule). Defaults to `NONE`. Note: `AUDITONLY` without an underscore is deprecated. | | SyncClientContentEncoding | String | Sets the Content-Encoding header for requests sent to the sync service. Acceptable values are "deflate", "gzip", "none". Defaults to deflate. |