summaryrefslogtreecommitdiff
path: root/docs/htmldocs/manpages/vfs_full_audit.8.html
diff options
context:
space:
mode:
Diffstat (limited to 'docs/htmldocs/manpages/vfs_full_audit.8.html')
-rw-r--r--docs/htmldocs/manpages/vfs_full_audit.8.html19
1 files changed, 11 insertions, 8 deletions
diff --git a/docs/htmldocs/manpages/vfs_full_audit.8.html b/docs/htmldocs/manpages/vfs_full_audit.8.html
index 4612ec1c16..1b75409f33 100644
--- a/docs/htmldocs/manpages/vfs_full_audit.8.html
+++ b/docs/htmldocs/manpages/vfs_full_audit.8.html
@@ -1,4 +1,4 @@
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_full_audit</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="vfs_full_audit"><a name="vfs_full_audit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_full_audit &#8212; record Samba VFS operations in the system log</p></div><div class="refsynopsisdiv" title="Synopsis"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = full_audit</code></p></div></div><div class="refsect1" title="DESCRIPTION"><a name="id266341"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_full_audit</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="vfs_full_audit"><a name="vfs_full_audit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_full_audit &#8212; record Samba VFS operations in the system log</p></div><div class="refsynopsisdiv" title="Synopsis"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = full_audit</code></p></div></div><div class="refsect1" title="DESCRIPTION"><a name="id266340"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the
<a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_full_audit</code> VFS module records selected
client operations to the system log using
<a class="citerefentry" href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a>.</p><p><code class="literal">vfs_full_audit</code> is able to record the
@@ -10,15 +10,17 @@
format consisting of fields separated by '|' characters. The
format is: </p><pre class="programlisting">
smbd_audit: PREFIX|OPERATION|RESULT|FILE
- </pre><p>The record fields are:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="literal">PREFIX</code> - the result of the full_audit:prefix string after variable substitutions</p></li><li class="listitem"><p><code class="literal">OPERATION</code> - the name of the VFS operation</p></li><li class="listitem"><p><code class="literal">RESULT</code> - whether the operation succeeded or failed</p></li><li class="listitem"><p><code class="literal">FILE</code> - the name of the file or directory the operation was performed on</p></li></ul></div><p>This module is stackable.</p></div><div class="refsect1" title="OPTIONS"><a name="id307090"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">vfs_full_audit:prefix = STRING</span></dt><dd><p>Prepend audit messages with STRING. STRING is
+ </pre><p>The record fields are:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="literal">PREFIX</code> - the result of the full_audit:prefix string after variable substitutions</p></li><li class="listitem"><p><code class="literal">OPERATION</code> - the name of the VFS operation</p></li><li class="listitem"><p><code class="literal">RESULT</code> - whether the operation succeeded or failed</p></li><li class="listitem"><p><code class="literal">FILE</code> - the name of the file or directory the operation was performed on</p></li></ul></div><p>This module is stackable.</p></div><div class="refsect1" title="OPTIONS"><a name="id307089"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">vfs_full_audit:prefix = STRING</span></dt><dd><p>Prepend audit messages with STRING. STRING is
processed for standard substitution variables listed in
<a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>. The default
prefix is "%u|%I". </p></dd><dt><span class="term">vfs_full_audit:success = LIST</span></dt><dd><p>LIST is a list of VFS operations that should be
recorded if they succeed. Operations are specified using
- the names listed above.
+ the names listed above. Operations can be unset by prefixing
+ the names with "!".
</p></dd><dt><span class="term">vfs_full_audit:failure = LIST</span></dt><dd><p>LIST is a list of VFS operations that should be
recorded if they failed. Operations are specified using
- the names listed above.
+ the names listed above. Operations can be unset by prefixing
+ the names with "!".
</p></dd><dt><span class="term">full_audit:facility = FACILITY</span></dt><dd><p>Log messages to the named
<a class="citerefentry" href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a> facility.
@@ -26,17 +28,18 @@
<a class="citerefentry" href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a> priority.
</p></dd></dl></div></div><div class="refsect1" title="EXAMPLES"><a name="id307189"></a><h2>EXAMPLES</h2><p>Log file and directory open operations on the [records]
share using the LOCAL7 facility and ALERT priority, including
- the username and IP address:</p><pre class="programlisting">
+ the username and IP address. Logging excludes the open VFS function
+ on failures:</p><pre class="programlisting">
<em class="parameter"><code>[records]</code></em>
<a class="link" href="smb.conf.5.html#PATH" target="_top">path = /data/records</a>
<a class="link" href="smb.conf.5.html#VFSOBJECTS" target="_top">vfs objects = full_audit</a>
<a class="link" href="smb.conf.5.html#FULL_AUDIT:PREFIX" target="_top">full_audit:prefix = %u|%I</a>
<a class="link" href="smb.conf.5.html#FULL_AUDIT:SUCCESS" target="_top">full_audit:success = open opendir</a>
- <a class="link" href="smb.conf.5.html#FULL_AUDIT:FAILURE" target="_top">full_audit:failure = all</a>
+ <a class="link" href="smb.conf.5.html#FULL_AUDIT:FAILURE" target="_top">full_audit:failure = all !open</a>
<a class="link" href="smb.conf.5.html#FULL_AUDIT:FACILITY" target="_top">full_audit:facility = LOCAL7</a>
<a class="link" href="smb.conf.5.html#FULL_AUDIT:PRIORITY" target="_top">full_audit:priority = ALERT</a>
-</pre></div><div class="refsect1" title="VERSION"><a name="id307365"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.
- </p></div><div class="refsect1" title="AUTHOR"><a name="id307374"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities
+</pre></div><div class="refsect1" title="VERSION"><a name="id307366"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.
+ </p></div><div class="refsect1" title="AUTHOR"><a name="id307375"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed.</p></div></div></body></html>