[Samba] full_audit logs way too much

[Kees van Vloten]

Op 15-06-2022 om 18:12 schreef Rowland Penny via samba:
> On Wed, 2022-06-15 at 17:26 +0200, Kees van Vloten via samba wrote:
>> Hi Team,
>>
>>
>> I have enabled full_audit logging on a (domain-member) file-server
>> (running 4.15.7 from Louis on Bullseye)
>>
>> [global]
>>           log level = 3
>>           full_audit:success = pwrite write rename
> There have been changes, try replacing 'rename' with 'renameat'.
> I think what is happening is that because 'rename is now an error, it
> is defaulting to 'all'.
>
> Rowland
>
>
Thanks Rowland, that is indeed the case. Issue solved!

Strangely enough 'smbcontrol all reload-config' was not enough to change 
it, I had to restart smbd to activate the changed config item.

- Kees