[Samba] File Permissions 770 vs 760

Fri Dec 31 05:56:59 MST 2010

Fred Legace wrote:
> I am running Ubuntu 10.04 LTS Server.

<snip>

> My problem is if I use "create mode = 770", WinXP users can only manage a
> 760 permission setting. That will not allow someone else in the group to
> set the file to readonly

Well, I just checked a couple of recently created files from a WinXP client machine on our Ubuntu 10.04 LTS server. Quite dismayed at what I find!

First off, this is our share:

[data]
    comment = Shared Application Data Files
    path = /srv/shares/data
    guest ok = no
    read only = no
    create mask = 0666
    directory mask = 0777

Wide open public dumping ground for data files! ;-)

New directory, no surprises:

drwxrwxrwx+  2 mdlueck mdlueck    4096 2010-12-30 09:14 2010

New files, however...

-rwxrwxrwx+  1 klueck  klueck   226247 2010-12-30 15:16
-rw-rwxrw-+  1 klueck  klueck   379849 2010-12-30 15:16

No idea why ACL's are getting on the files.

No idea why new files end up totally / partially executable.

GREAT!!!!! :-(

-- 
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/