An event reporting framework for Samba

[Uri Simchoni]

On 01/24/2016 05:06 PM, Stefan Metzmacher wrote:
> Hi Richard,
>
>> I am seeking feedback on an idea for an improvement in Samba.
>>
>> <snip>
>> Does this sound like a useful thing to do?
> Yes, I think we should try to base this on the SACLs of security descriptors
> as much as possible. This would solve the problem for everything that
> is protected by a security descriptor not just files.
> <snip>
One thing that would make it more useful IMHO is to separate the event 
aspect from the auditing. An audit generates an event, and there may be 
other event sources (ones that improve supportability).

Thanks,
Uri.