When unRAID boots, it rewrites the /etc/samba/smb.shares file, but writes them with

create mask = 0611

directory mask = 0711

 

As long as there are no users other than root logging into unRAID, this is sort of OK.  But as soon as you start doing a few other things with unRAID, such as a web server or other utilities, and your write files to unRAID via samba shares that need to be read by other programs that run as something other than root (like Apache) you run into problems.

 

create mask = 0644

directory mask = 0755

 

As a work around, you can stop samba, rewrite the /etc/samba/smb.shares file, and restart samba.... but this is not an optimal solution.

 

Is that how the masks are set up when user level security is enabled?

I couldn't say... I've never enabled user level security via unRAID.  For now, after starting emhttp, I have to sleep, stop samba, copy my own smb.shares, and restart samba.