vfs_audit — record selected Samba VFS operations in the system log
vfs objects = audit
This VFS module is part of the samba(7) suite.
The vfs_audit
VFS module records selected
client operations to the system log using
syslog(3).
The following Samba VFS operations are recorded:
connect |
disconnect |
opendir |
mkdir |
rmdir |
open |
close |
rename |
unlink |
chmod |
fchmod |
chmod_acl |
fchmod_acl |
This module is stackable.
Log operations on all shares using the LOCAL1 facility and NOTICE priority:
[global]
vfs objects = audit
audit:facility = LOCAL1
audit:priority = NOTICE