Open System Services Programmer's Guide

• The file-creation mode (mode)
• The process umask (umask)
If the fileset does not support OSS ACLs, the permissions of the created file are the mode
bitwise-ANDed with the complement of the umask.
If the fileset supports OSS ACLs, but the system on which the process is running does not support
OSS ACLs, and the parent directory for the created file does not have default ACL entries, the
permissions of the created file are the mode bitwise-ANDed with the complement of the umask.
If the fileset supports OSS ACLs, but the system on which the process is running does not support
OSS ACLs, and the parent directory for the created file has default ACL entries:
• The permissions for the base ACL entries of the created file or directory are determined by a
combination of the file-creation mode and the default base ACL entries of the parent directory
as follows:
Derived FromPermissions Type
The DEF_USER_OBJ permissions bitwise-ANDed with the modeuser permissions
bitwise-ANDed with the complement of the umaskuser permissions
USER_OBJ permissions
The DEF_GROUP_OBJ permissionsGROUP_OBJ permissions
The DEF_CLASS_OBJ permissions bitwise-ANDed with the modegroup permissions
bitwise-ANDed with the complement of the umaskgroup permissions
CLASS_OBJ permissions
The DEF_OTHER_OBJ permissions bitwise-ANDed with the modeother permissions
bitwise-ANDed with the complement of the umaskother permissions
OTHER_OBJ permissions
• The default optional ACL entries for the parent directory of the created file are added to the
ACL of the created file as actual (nondefault) optional ACL entries.
• If the created file is a directory, all of the default ACL entries of the parent directory are added
to the ACL of the new directory. This behavior allows ACL entries to be inherited by files and
directories created under this new directory.
If both the fileset for the created file and the system in which the process is running support OSS
ACLs, and the parent directory for the created file does not have default ACL entries, the permissions
of the created file are the mode bitwise-ANDed with the complement of the umask.
If both the fileset for the created file and the system in which the process is running support OSS
ACLs, and the parent directory of the created file contains default ACL entries:
• The permissions for the base ACL entries of the created file or directory are determined by a
combination of the file-creation mode and the default base ACL entries of the parent directory
as follows:
Derived FromPermissions Type
The DEF_USER_OBJ permissions bitwise-ANDed with the modeuser permissionsUSER_OBJ permissions
The DEF_GROUP_OBJ permissionsGROUP_OB permissions
The DEF_CLASS_OBJ permissions bitwise-ANDed with the modegroup permissionsGROUP_OB permissions
The DEF_OTHER_OBJ permissions bitwise-ANDed with the modeother permissionsOTHER_OBJ permissions
• The default optional ACL entries for the parent directory of the created file are added to the
ACL of the created file as actual (nondefault) optional ACL entries.
• If the created file is a directory, all of the default ACL entries of the parent directory are copied
to the ACL of the new directory. This behavior allows default ACL entries to be inherited by
files and directories created under this new directory.
264 Managing OSS Security