source: branches/samba-3.5.x/docs-xml/smbdotconf/security/createmask.xml

<samba:parameter name="create mask"
                 context="S"
                                 type="string"
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">

<synonym>create mode</synonym>
<description>
    <para>
        When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to
        UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may
        be thought of as a bit-wise MASK for the UNIX modes of a file. Any bit <emphasis>not</emphasis> set here will
        be removed from the modes set on a file when it is created.
        </para>

    <para>
        The default value of this parameter removes the <literal>group</literal> and <literal>other</literal>
        write and execute bits from the UNIX modes.
        </para>

    <para>
        Following this Samba will bit-wise 'OR' the UNIX mode created from this parameter with the value of the
        <smbconfoption name="force create mode"/> parameter which is set to 000 by default.
        </para>

    <para>
        This parameter does not affect directory masks. See the parameter <smbconfoption name="directory mask"/>
        for details.
        </para>

    <para>
        Note that this parameter does not apply to permissions set by Windows NT/2000 ACL editors. If the
        administrator wishes to enforce a mask on access control lists also, they need to set the <smbconfoption
        name="security mask"/>.
        </para>
</description>

<related>force create mode</related>
<related>directory mode</related>
<related>inherit permissions</related>

<value type="default">0744</value>
<value type="example">0775</value>
</samba:parameter>