samba - Nov 2021 - fileserver permissions: 0750 vs 0740

Hi folks, maybe a "light" question, but I'm thinking if it's
better set
share users permissions as 0750 or 0740?

for security purpose, it's the same thing or it's better set to 0740? 
why, with 0740 I can execute directly from share but before I need copy 
to local folder, naturally with 0750 users can execute directly from 
shared folder

thanks for help

Pol

With 0740 permissions on directories, group users won't be able to see 
files in the directory. With regard to files, if users can't copy 
executables to the shared directory (which they can't if w permission is 
missing), I'm not sure this is a major concern, since they can run 
appropriately permissioned system executables from any where.

On 11/15/21 12:45, Pol Hallen via samba wrote:
> Hi folks, maybe a "light" question, but I'm thinking if
it's better set
> share users permissions as 0750 or 0740?
> 
> for security purpose, it's the same thing or it's better set to
0740?
> why, with 0740 I can execute directly from share but before I need copy 
> to local folder, naturally with 0750 users can execute directly from 
> shared folder
> 
> thanks for help
> 
> Pol
>