summaryrefslogtreecommitdiff
path: root/source3
diff options
context:
space:
mode:
authorVolker Lendecke <vlendec@samba.org>2004-04-29 13:07:34 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 10:51:22 -0500
commit3250a8ab0aa70b1658dbc187af56d20de5c32cc8 (patch)
tree6c4a269512317efa626130f7e01e542f57114478 /source3
parent9e7dcbdbb76f76d310420734045f70828f60a63b (diff)
downloadsamba-3250a8ab0aa70b1658dbc187af56d20de5c32cc8.tar.gz
samba-3250a8ab0aa70b1658dbc187af56d20de5c32cc8.tar.bz2
samba-3250a8ab0aa70b1658dbc187af56d20de5c32cc8.zip
r405: Some docs of vfs_full_audit.c as comment :-)
(This used to be commit 567f79237727a446c0e8427f18c74f00eca45c8e)
Diffstat (limited to 'source3')
-rw-r--r--source3/modules/vfs_full_audit.c31
1 files changed, 31 insertions, 0 deletions
diff --git a/source3/modules/vfs_full_audit.c b/source3/modules/vfs_full_audit.c
index 2371c40636..993a8ee4cb 100644
--- a/source3/modules/vfs_full_audit.c
+++ b/source3/modules/vfs_full_audit.c
@@ -23,6 +23,37 @@
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/
+/*
+ * This module implements parseable logging for all Samba VFS operations.
+ *
+ * You use it as follows:
+ *
+ * [tmp]
+ * path = /tmp
+ * vfs objects = full_audit
+ * full_audit:prefix = %u|%I
+ * full_audit:success = open opendir
+ * full_audit:failure = all
+ *
+ * This leads to syslog entries of the form:
+ * smbd_audit: nobody|192.168.234.1|opendir|ok|.
+ * smbd_audit: nobody|192.168.234.1|open|fail (File not found)|r|x.txt
+ *
+ * where "nobody" is the connected username and "192.168.234.1" is the
+ * client's IP address.
+ *
+ * Options:
+ *
+ * prefix: A macro expansion template prepended to the syslog entry.
+ *
+ * success: A list of VFS operations for which a successful completion should
+ * be logged. Defaults to no logging at all. The special operation "all" logs
+ * - you guessed it - everything.
+ *
+ * failure: A list of VFS operations for which failure to complete should be
+ * logged. Defaults to logging everything.
+ */
+
#include "includes.h"