It looks like nobody is working on this (possibly because it's just an example), I also was unable to find some other auditting thing for samba 2.2.x, is this right? (auditting, like: open/unlink/mkdir/etc). If so, I could try to improve this module so we get a real auditting module (instead of an example of how to use VFS) Please let me know, B. Matthys (Syzop).