Samba

В настройках самбы, в файле smb.conf, есть параметры:
create mask, directory mask.
Я все никак не мог запомнить, как они влияют на атрибуты файлов.

Сегодня таки разобрался. Бит, который = 0 в маске, будет = 0 в атрибутах файла (или каталога) созданного с удаленной машины. Сами биты соответствуют юниксовым атрибутам rwxrwxrwx для владельца, группы и остальных.

Мне оказалось проще выставить
force create mode = 0666
force directory mode = 0777
чтобы всем был доступ на запись и чтение. В то же время файлы не могут быть выполняемыми.

А еще можно выставить setuid бит (4000) для вышележащего каталога (chmod g+s dirname) и тогда все создаваемые в этом каталоге файлы (и каталоги) будут под владением владельца каталога (в примере - группы владельца).

А вот хорошие шпаргалки на тему, добрые люди написали:

from 'man smb.conf' :

create mask (S)
When a file is created, the necessary permissions are calculated
according to the mapping from DOS modes to UNIX permissions, and
the resulting UNIX mode is then bit-wise 'AND'ed with this
parameter. This parameter may be thought of as a bit-wise MASK
for the UNIX modes of a file. Any bit not set here will be
removed from the modes set on a file when it is created.

The default value of this parameter removes the 'group' and
'other' write and execute bits from the UNIX modes.

Following this Samba will bit-wise 'OR' the UNIX mode created
from this parameter with the value of the force create mode
parameter which is set to 000 by default.

This parameter does not affect directory modes. See the parame-
ter directory mode for details.

Note that this parameter does not apply to permissions set by
Windows NT/2000 ACL editors. If the administrator wishes to
enforce a mask on access control lists also, they need to set
the security mask.

Default: create mask = 0744

Example: create mask = 0775


from 'man chmod' :

MODES
Modes may be absolute or symbolic. An absolute mode is an octal number
constructed from the sum of one or more of the following values:

4000 (the setuid bit). Executable files with this bit set will
run with effective uid set to the uid of the file owner.
Directories with this bit set will force all files and sub-
directories created in them to be owned by the directory
owner and not by the uid of the creating process, if the
underlying file system supports this feature: see chmod(2)
and the suiddir option to mount(8).
2000 (the setgid bit). Executable files with this bit set will
run with effective gid set to the gid of the file owner.
1000 (the sticky bit). See chmod(2) and sticky(8).
0400 Allow read by owner.
0200 Allow write by owner.
0100 For files, allow execution by owner. For directories,
allow the owner to search in the directory.
0040 Allow read by group members.
0020 Allow write by group members.
0010 For files, allow execution by group members. For directo-
ries, allow group members to search in the directory.
0004 Allow read by others.
0002 Allow write by others.
0001 For files, allow execution by others. For directories
allow others to search in the directory.

• linuxquestions.org/questions/linux-networking-3/samba-create-mask
• samba.org/samba/docs/man/Samba-HOWTO-Collection