Samba has a module vfs_full_audit, what does each object actually mean within the module?
4
votes
3
answers
5755
views
The module vfs_full_audit in Samba lists objects that can be added to the module to increase the logging specificity or verbosity generally of syscalls. Example:
# defaults for auditing
full_audit:priority = notice
full_audit:facility = local6
full_audit:failure = create_file open opendir rmdir unlink unlinkat connect connectpath disconnect
full_audit:success = rename opendir rmdir unlink open create_file opendir unlinkat connect connectpath disconnect
full_audit:prefix = %U|%d|%u|%R|%I|%S
However in the man page located here: https://www.samba.org/samba/docs/current/man-html/vfs_full_audit.8.html
It fails to define explicitly what each object actually does - I understand that some of them are fairly obvious such as "open" or "rmdir" but a sentence just describing what each part does would be very useful for more questionable ones such as "kernel_flock"
Does anyone know of any resource/URL that defines these values explicitly? Or perhaps this has been asked previously by one of you and had data back from Sernet detailing it?
Thanks for looking ;)
Asked by firespasm
(61 rep)
Jul 16, 2021, 01:54 PM
Last activity: Jun 8, 2023, 04:53 AM
Last activity: Jun 8, 2023, 04:53 AM