[Samba] vfs_full_audit log question
Rowland Penny
rpenny at samba.org
Mon Sep 11 10:23:19 UTC 2023
On Mon, 11 Sep 2023 18:14:00 +0800
d tbsky via samba <samba at lists.samba.org> wrote:
> Hi:
> today my user report one directory at the samba share disappeared.
> I had create the vfs_full_audit like below:
>
> vfs objects = recycle full_audit
> full_audit:priority = notice
> full_audit:facility = local5
> full_audit:success = mkdirat renameat unlinkat
> full_audit:failure = none
> full_audit:prefix = %u|%I
>
> but I can not find the related log about the missing directory.
> normally I can find deleted/renamed files via the log. I wonder if
> there is some other vfs operations I should add for monitor
> directories?
>
> thanks a lot for your help!
>
Please do not post a portion of your smb.conf , it is useless without
the rest of the smb.conf , there is no context.
What I will say is, if you have other 'vfs objects' set, then you have
turned them off.
Rowland
More information about the samba
mailing list