Hi list,

beginning with samba 3.5.9, the behaviour or effects of the "force group" parameter changed. The change is that with my config I can create new files on the share but I can no longer delete (or rename) those files. With 3.5.8, I could create and delete them.

The setup is as follows:

[webshare]
       path = /webshare
       force group = www
       create mask = 0664
       force create mode = 0664
       directory mask = 0775
       force directory mode = 0775

drwxrwxr-x 2 root users 4096 2011-09-15 10:55 /webshare

Access is being done by user bob, who is in group users but not in www.

So I have a directory /webshare, which is owned by root:users, with permissions 0775. If user bob creates a file in this dir, it is owned by bob:www, wich permissions 0664 (as expected). With samba 3.5.8 and before bob could also delete this file again. With 3.5.9 and up (up to 3.6.0) the delete is rejected with Permission Denied.

That the delete is denied is correct if you look at the unix permissions on /webshare; this can be confirmed by either changing the permissions on that dir to 777 or the group to www; in both cases the delete is allowed.

What I don't understand is: if the delete is denied, why is it allowed to *create* files in this setup? It seems the change in 3.5.9 only affected checking permissions on delete and rename, but not on create.

Is this expected behaviour, am I missing something, or should I file it as a bug?

Best regards,

Roel


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to