vfs_audit — record selected Samba VFS operations in the system log
vfs objects = audit
This VFS module is part of the samba(7) suite.
The vfs_audit VFS module records selected
client operations to the system log using
syslog(3).
The following Samba VFS operations are recorded:
| connect |
| disconnect |
| opendir |
| mkdir |
| rmdir |
| open |
| close |
| rename |
| unlink |
| chmod |
| fchmod |
| chmod_acl |
| fchmod_acl |
This module is stackable.
Log operations on all shares using the LOCAL1 facility and NOTICE priority:
[global]
vfs objects = audit
audit:facility = LOCAL1
audit:priority = NOTICE