summaryrefslogtreecommitdiff
path: root/docs/docbook/smbdotconf/security/createmask.xml
blob: 9a197bf7c3139f77a8e20aebb6a56119a4befa70 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
<samba:parameter xmlns:samba="http://samba.org/common">
		<term><anchor id="CREATEMASK"/>create mask (S)</term>
		<listitem><para>A synonym for this parameter is 
		<link linkend="CREATEMODE"><parameter moreinfo="none">create mode</parameter>
		</link>.</para>

		<para>When a file is created, the necessary permissions are 
		calculated according to the mapping from DOS modes to UNIX 
		permissions, and the resulting UNIX mode is then bit-wise 'AND'ed 
		with this parameter. This parameter may be thought of as a bit-wise 
		MASK for the UNIX modes of a file. Any bit <emphasis>not</emphasis> 
		set here will be removed from the modes set on a file when it is 
		created.</para>

		<para>The default value of this parameter removes the 
		'group' and 'other' write and execute bits from the UNIX modes.</para>

		<para>Following this Samba will bit-wise 'OR' the UNIX mode created 
		from this parameter with the value of the <link linkend="FORCECREATEMODE"><parameter moreinfo="none">force create mode</parameter></link>
		parameter which is set to 000 by default.</para>

		<para>This parameter does not affect directory modes. See the 
		parameter <link linkend="DIRECTORYMODE"><parameter moreinfo="none">directory mode
		</parameter></link> for details.</para>

		<para>See also the <link linkend="FORCECREATEMODE"><parameter moreinfo="none">force 
		create mode</parameter></link> parameter for forcing particular mode 
		bits to be set on created files. See also the <link linkend="DIRECTORYMODE">
		<parameter moreinfo="none">directory mode</parameter></link> parameter for masking 
		mode bits on created directories.  See also the <link linkend="INHERITPERMISSIONS">
		<parameter moreinfo="none">inherit permissions</parameter></link> parameter.</para>

		<para>Note that this parameter does not apply to permissions
		set by Windows NT/2000 ACL editors. If the administrator wishes to enforce
		a mask on access control lists also, they need to set the <link linkend="SECURITYMASK"><parameter moreinfo="none">security mask</parameter></link>.</para>

		<para>Default: <command moreinfo="none">create mask = 0744</command></para>
		<para>Example: <command moreinfo="none">create mask = 0775</command></para></listitem>
		</samba:parameter>