MacOS – Files created by Windows on Lion SMB shares have 600 permissions

macospermissionsmb

I have File Sharing enabled in OS X Lion, and I'm accessing the shares using Win XP and Win 7 boxes. I can read and write fine, by when I create a new file, the permissions for that file defaults to 600, and is accessible only by the account authenticated with SMB. If I edit files, permissions are not changed. It is only new files that have this problem. This means other accounts on OS X cannot access the files, and neither can the apache server, which runs as _www I think.

Is there a way to make Lion SMB mark new files as 644 instead?

Best Answer

I think this could be a bug. I'm seeing the same behaviour in Mountain Lion too.

I've ensured that the file sharing settings are correct. Go to the folder in Finder and verify that the user has correct permissions, including creating files locally, which result in the correct (644) permissions. Go to System Preferences -> Sharing and select the share, and verify the user is in the list with read&write permissions.

Using the command line tool:

$ dscl localhost -list /Local/Default/SharePoints

to list shares, and:

$ dscl localhost -read /Local/Default/SharePoints/<sharename>

I can see:

dsAttrTypeNative:smb_createmask: 644
dsAttrTypeNative:smb_directorymask: 755

Yet files created by windows users end up with 600 permissions and are not readable by others.

While not an answer, hopefully it will give someone a step closer to finding it.

Related Solutions

MacOS – Permissions for new files in shared directory

You can't do this with traditional POSIX-style permissions, but you can with inheritable access control entries. To allow read+write access for the entire "staff" group to everything in /Users/Shared/reallyshared, you'd use:

sudo chmod -R +a "staff allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity,file_inherit,directory_inherit" /Users/Shared/reallyshared

The file_inherit,directory_inherit part means that this access control entry will automatically be added to new files & folders created inside this folder, but it doesn't automatically apply to items already there (that's why I added the -R flag to chmod -- that applies it to everything currently within the folder), and it won't be applied to items created somewhere else and then moved into this folder (I don't know of a way around this, sorry).

MacOS – Access Lion SMB shares from Linux

Samba no more, for Lion Server mount.cifs needs extra options, "nounix,sec=ntlmssp"

  [root@50centos ~]# 
  [root@50centos ~]# yum install samba-client samba-common cifs-utils
 ...
  [root@50centos ~]# mkdir /mnt/lion_smb
  [root@50centos ~]# mount -t cifs -o MikeCochran,trustno1,nounix,sec=ntlmssp //198.252.206.140/smb_share /mnt/lion_smb/

          =^..^=       `·.¸¸ ><((((º>.·´¯`·><((((º>   

MikeCochran@stack:~$ 
MikeCochran@stack:~$ sudo apt-get install cifs-utils
  ...
MikeCochran@stack:~$ mkdir /mnt/lion_smb
MikeCochran@stack:~$ mount.cifs //198.252.206.140/smb_share /mnt/lion_smb/ -o user=MikeCochran,password=trustno1,nounix,sec=ntlmssp
MikeCochran@stack:~$ 
MikeCochran@stack:~$ mkdir /mnt/lion_smb_dup
MikeCochran@stack:~$ mount -t cifs //198.252.206.140/smb_share /mnt/lion_smb-dup -o username=MikeCochran,password=trustno1,nounix,sec=ntlmssp

apologies for the delay!!

Best Answer

Related Solutions

MacOS – Permissions for new files in shared directory

MacOS – Access Lion SMB shares from Linux

Related Question