[Samba] File deletion auditing

Dante Colo dante.colo at stwbrasil.com
Wed May 28 06:30:48 MDT 2014

Hello everyone 

I'm testing the module vfs_full_audit on samba 4.0.17 under FreeBSD 10, i couldn't figure out how to audit file deletions only directories, is this possible ? This is my share setup. 

vfs objects = aio_pthread,zfsacl 
aio read size = 32768 
aio write size = 32768 
full_audit:success = write mkdir rmdir pwrite rename 
full_audit:failure = write mkdir rmdir pwrite rename 
full_audit:facility = LOCAL0 
full_audit:priority = NOTICE 
writable = yes 
browsable = yes 

inherit owner = yes 

More information about the samba mailing list