Ich habe gerade mal mit dem vfs-objekt full_audit "herumgespielt":
Code:
path = /freigabe4711
vfs objects = full_audit recycle
full_audit:prefix = %u|%m|%I
full_audit:success = open opendir close write delete
full_audit:failure = all
Im logfile (derzeit /var/log/messages) steht dann so etwas:
Code:
Jun 23 10:05:28 silber smbd_audit: administrator|erde|172.18.19.33|chdir|ok|chdir|/freigabe4711
Jun 23 10:05:28 silber smbd_audit: administrator|erde|172.18.19.33|opendir|ok|.
Jun 23 10:05:28 silber smbd_audit: administrator|erde|172.18.19.33|readdir|ok|
Jun 23 10:05:28 silber smbd_audit: administrator|erde|172.18.19.33|readdir|ok|
Jun 23 10:05:28 silber smbd_audit: administrator|erde|172.18.19.33|readdir|ok|
Jun 23 10:05:28 silber smbd_audit: administrator|erde|172.18.19.33|telldir|ok|
Jun 23 10:05:28 silber smbd_audit: administrator|erde|172.18.19.33|readdir|ok|
Jun 23 10:05:28 silber smbd_audit: administrator|erde|172.18.19.33|telldir|ok|
Jun 23 10:05:28 silber smbd_audit: administrator|erde|172.18.19.33|readdir|ok|
Jun 23 10:05:28 silber smbd_audit: administrator|erde|172.18.19.33|closedir|ok|
Jun 23 10:05:28 silber smbd_audit: administrator|erde|172.18.19.33|chdir|ok|chdir|/freigabe4711
HTH,
mamue
Lesezeichen