diff options
Diffstat (limited to 'docs-xml/manpages-3/vfs_full_audit.8.xml')
| -rw-r--r-- | docs-xml/manpages-3/vfs_full_audit.8.xml | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/docs-xml/manpages-3/vfs_full_audit.8.xml b/docs-xml/manpages-3/vfs_full_audit.8.xml index 1d519e2e09..9c9dc843f8 100644 --- a/docs-xml/manpages-3/vfs_full_audit.8.xml +++ b/docs-xml/manpages-3/vfs_full_audit.8.xml @@ -184,7 +184,8 @@ <listitem> <para>LIST is a list of VFS operations that should be recorded if they succeed. Operations are specified using - the names listed above. + the names listed above. Operations can be unset by prefixing + the names with "!". </para> </listitem> @@ -195,7 +196,8 @@ <listitem> <para>LIST is a list of VFS operations that should be recorded if they failed. Operations are specified using - the names listed above. + the names listed above. Operations can be unset by prefixing + the names with "!". </para> </listitem> @@ -232,7 +234,8 @@ <para>Log file and directory open operations on the [records] share using the LOCAL7 facility and ALERT priority, including - the username and IP address:</para> + the username and IP address. Logging excludes the open VFS function + on failures:</para> <programlisting> <smbconfsection name="[records]"/> @@ -240,7 +243,7 @@ <smbconfoption name="vfs objects">full_audit</smbconfoption> <smbconfoption name="full_audit:prefix">%u|%I</smbconfoption> <smbconfoption name="full_audit:success">open opendir</smbconfoption> - <smbconfoption name="full_audit:failure">all</smbconfoption> + <smbconfoption name="full_audit:failure">all !open</smbconfoption> <smbconfoption name="full_audit:facility">LOCAL7</smbconfoption> <smbconfoption name="full_audit:priority">ALERT</smbconfoption> </programlisting> |