[Samba] 4.17.3 on debian: vfs_full_audit issues

Stefan G. Weichinger lists at xunil.at
Sun Dec 11 14:59:37 UTC 2022


Am 10.12.22 um 00:21 schrieb Jeremy Allison via samba:
> On Sat, Dec 10, 2022 at 12:02:05AM +0300, Michael Tokarev wrote:
>> of code in the patch :).
>>
>> The thing is that _some_ syscalls now have both ways, - eg open *and* 
>> openat.
>>
>> (Sure it's okay to modify the manpage too).
>>
>> The PoC patch is attached (I haven't tried to even compile it yet).
>> Is something like that okay? :)
> 
> Looks good, but doing a search on "AT," finds:
> 
> SMB_VFS_OP_CREATE_DFS_PATHAT -> map to "create_dfs_path"
> SMB_VFS_OP_READ_DFS_PATHAT -> map to "read_dfs_path"
> SMB_VFS_OP_FSTATAT -> map to "fstat" ?
> SMB_VFS_OP_GET_REAL_FILENAME_AT -> map to "get_real_filename" ?

Thanks all in the thread. I assume I can only wait for any updated packages?

For now share access seems to work on that server, just with a reduced 
set of logged actions. That's acceptable for a few days, as long as the 
users don't know ;-)




More information about the samba mailing list