DSM-G600, DNS-3xx and NSA-220 Hack Forum

Read any linux tutorial on Samba and especially samba conf file - you can achieve your goals by simply modifying this file.
For how to use a modified samba configuration file on your NAS, http://dns323.kood.org/forum/t1232-wher … ed%3F.html
The wiki also has info on this.

You are getting "root type" access because when someone stores a file on the DNS from the network via Samba, Samba creates the file with mode 0777.  This mode effectively lets any user read/write the file.

If you look at the /etc/samba/smb.conf file, you'll see settings for "create mask", "directory mask", "force create mode", "force directory mode".  They are all 0777 on my machine.  I'd suggest looking these up in the Samba docs (search online) and change them as needed.  The link InBonobo posted explains how to make the changes "stick".

If I wanted files to be writable only by their owners and readable by everyone else, I would set:

create mask 0644
directory mask 0755
force create mode 0444
force directory mode 0555

Then restart samba to pick up the change and then store a new file on the DNS from a Windows box or whatever.  If the original file was read-only, the permissions of the new file on the DNS should be 444.  If the file on the Windows box was not read-only, then the permissions should be 644.  The owner of the file should be the user who created the file; not root.

Once you get that working, you'll have to go through any other existing files in HD_a2 and change their permissions to what is desired, as any other existing files will be 777.  Use chmod.

If you want to NOT let everyone have read access to these files and only the owner can read/write, then the settings would be:

create mask 0600
directory mask 0700
force create mode 0400
force directory mode 0500

These values can be specified on a per-share basis and could therefore be used to make "private" areas for people.

Most of the files in the root directory (not HD_a2) should be pretty much set up so that root owns them and only root can write to them.  So, you will see a lot of 755 and 644 perms there.  755 is writable only by root, but read and executable by everyone.  You probably should not change any of these permissions.  Your will probably be able to see, read, and execute many of them, but should not be able to modify them.


As for what shell gets started and the user's starting directory, you might refer to the instructions in ffp setup regarding setting up the root account and apply them to the other users as well. 

Anyway, the general way to fix this is to tweak the samba parameters.