NAME
umask — get or set the file mode creation mask
SYNOPSIS
umask [−S] [mask]
EXAMPLES
Either of the commands:
umask a=rx,ug+w
umask 002
sets the mode mask so that subsequently created files have their S_IWOTH bit cleared.
After setting the mode mask with either of the above commands, the umask command can be used to
write out the current value of the mode mask:
$ umask
0002
(The output format is unspecified, but historical implementations use the octal integer mode for‐
mat.)
$ umask −S
u=rwx,g=rwx,o=rx
Either of these outputs can be used as the mask operand to a subsequent invocation of the umask
utility.
Assuming the mode mask is set as above, the command:
umask g−w
sets the mode mask so that subsequently created files have their S_IWGRP and S_IWOTH bits cleared.
The command:
umask −− −w
sets the mode mask so that subsequently created files have all their write bits cleared. Note that
mask operands −r, −w, −x or anything beginning with a <hyphen>, must be preceded by "−−" to keep
it from being interpreted as an option.
最关键的一点就是,umask中的mask与chmod中的mask是2进制补码关系,逐位取反就行。它描述的是禁止(剔除)哪些权限。