I'd like to configure a share on a standalone samba serve where users have rw to their own files, but r to others in the same group (rwx and rx on folders respectively). It works well when users creating new files and directories, but after certain file operations the file becomes rwx for group, which is undesirable.
The share is configured as this:
[share] path = /mnt/asd/bsd read only = yes valid users = @agroup, auser write list = @agroup directory mask = 0755 create mask = 0644 force group = +agroup Reproduction, share is mounted as a drive on a Windows 8.1 client:
- copy a x.jpg into the sare - so far so good, it becomes 644, owned by the user who created it and group is enforced as well
- open the .jpg from the share with Windows Photo Viewer, rotate it - after the file gets saved upon closing it becomes mode 674 - too bad
- right click > properties > security tab still shows only "read" permission for the group, there's no way to fix this remotely.
The same is happening when I right click the file in Windows and try to edit the permissions.
/ # smbd --version Version 4.2.9 Is it a misconfig, or is there a way to restrict remote file mode changes? Tried to play with masks, or other config options so far no luck.
