MacOS – How to automatically apply permissions to files added to a shared folder

macospcpermissionsharing

I have a shared folder setup on a Mac Mini Server. It has permissions for our company group to read/write. When a mac user adds a file to the shared folder, it inherits the permissions of the folder and everyone can access it (yay!).

However, when a PC user adds a file to the folder, it insists on applying its own permissions to the file, not allowing the other users in the group to access it. I have to manually go into the server and apply the folder permissions to the new files added.

How can I have the files added by the PC users automatically inherit the permissions of the parent share folder?

Best Answer

I believe the way to resolve this is to set up ACL inheritance permissions on the parent folder. More about this here.

Firstly enable ACL permissions for SMB shares with the following command.

sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AclsEnabled -bool YES

Then set up inheritance permissions on the parent holder with the following command. This should recursively go through your share and apply the relevant permissions.

sudo chmod -R +a "group:REPLACE_WITH_YOURGROUP_NAME:allow readattr,writeattr,readextattr,writeextattr,readsecurity,list,search,add_file,add_subdirectory,delete_child,file_inherit,directory_inherit" REPLACE_WITH_PATH_TO_PARENT_SHARED_FOLDER

To be safe I'd recommend creating a test share to try the chmod command before applying it to your company's share. Then once you are sure you get the right results apply it to the live/production share.

Related Solutions

MacOS – Permissions for new files in shared directory

You can't do this with traditional POSIX-style permissions, but you can with inheritable access control entries. To allow read+write access for the entire "staff" group to everything in /Users/Shared/reallyshared, you'd use:

sudo chmod -R +a "staff allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity,file_inherit,directory_inherit" /Users/Shared/reallyshared

The file_inherit,directory_inherit part means that this access control entry will automatically be added to new files & folders created inside this folder, but it doesn't automatically apply to items already there (that's why I added the -R flag to chmod -- that applies it to everything currently within the folder), and it won't be applied to items created somewhere else and then moved into this folder (I don't know of a way around this, sorry).

MacOS – How to mount a shared folder as disk with `rwxr-xr-x` permissions

You need to specify the permissions when executing mount - the local file permissions or the permissions you set with chmod on the directory to which you mount your share will not be taken into consideration.

You should do mount -t <fs_type> -o m=755 /path/to/source /destination

I'm not sure which filesystem type is what you're trying to mount (is it nfs? or hfs?) - you only refer to a host system and a guest system without any more details. You'll need to specify the correct file system type to the mount command (but I'm presuming you have already done that and it did work). Also, it would be a good idea for you to read the man for the relevant mount command (so, if the fstype is hfs, you'll need to read man mount_hfs; similarly, if it's nfs, you need to man mount_nfs; have a look at the bottom of man mount for more fs specific mount commands).

Hope that helps!

Best Answer

Related Solutions

MacOS – Permissions for new files in shared directory

MacOS – How to mount a shared folder as disk with `rwxr-xr-x` permissions

Related Question