Saturday, September 3, 2016

permissions - Configuring a truly world-writable directory for Samba

I have a directory on a linux server, where my user owns all the files, and only a certain directory is world-writable. All other directories are read-only for guests. The idea is that anyone should be able to do anything they want inside the world-writable directory, but there's one problem: I can't alter guest-created files with my own UNIX user afterwards.



I just can't figure out what kind of UNIX permissions and/or samba settings would allow the same kind of behavior that I have in a similarly configured windows share. On the windows machine, I can set the world-writable directory on the share to have write permissions for "Everyone", and everyone can then do anything they want inside that directory, locally or by accessing the share as a guest. How do I get this same functionality on the linux server? Currently files written by guests can only be altered by UNIX users nobody and root.



Here is my smb.conf:




[global]

unix charset = iso8859-15
interfaces = 192.168.0.1
bind interfaces only = yes
socket address = 192.168.0.1
name resolve order = host
read only = no
max open files = 32768
csc policy = disable
load printers = no
syslog = 0

map to guest = Bad user # This is horrible :)

[homes]
browseable = no
create mask = 0600
security mask = 0600
directory mask = 0700
directory security mask = 0700

[problem_share]

path = /storage
public = yes
create mask = 0644
security mask = 0644
directory mask = 0755
directory security mask = 0755
hide dot files = no


I have tried using default ACLs, but that didn't seem to help. Those have been very helpful in many other situations, but samba has so many permissions settings that seem to interfere somehow.

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...