Ignore:
Timestamp:
May 23, 2008, 6:56:41 AM (18 years ago)
Author:
Paul Smedley
Message:

Update source to 3.0.29

File:
1 edited

Legend:

Unmodified
Added
Removed

  • branches/samba-3.0/docs/manpages/vfs_full_audit.8

    r44 r134  
    1 .\"Generated by db2man.xsl. Don't modify this, modify the source.
    2 .de Sh \" Subsection
    3 .br
    4 .if t .Sp
    5 .ne 5
    6 .PP
    7 \fB\\$1\fR
    8 .PP
    9 ..
    10 .de Sp \" Vertical space (when we can't use .PP)
    11 .if t .sp .5v
    12 .if n .sp
    13 ..
    14 .de Ip \" List item
    15 .br
    16 .ie \\n(.$>=3 .ne \\$3
    17 .el .ne 3
    18 .IP "\\$1" \\$2
    19 ..
    20 .TH "VFS_FULL_AUDIT" 8 "" "" ""
     1.\"     Title: vfs_full_audit
     2.\"    Author:
     3.\" Generator: DocBook XSL Stylesheets v1.73.2 <http://docbook.sf.net/>
     4.\"      Date: 05/21/2008
     5.\"    Manual: System Administration tools
     6.\"    Source: Samba 3.0
     7.\"
     8.TH "VFS_FULL_AUDIT" "8" "05/21/2008" "Samba 3\.0" "System Administration tools"
     9.\" disable hyphenation
     10.nh
     11.\" disable justification (adjust text to left margin only)
     12.ad l
    2113.SH "NAME"
    2214vfs_full_audit - record Samba VFS operations in the system log
    … …  
    2820This VFS module is part of the
    2921\fBsamba\fR(7)
    30 suite.
     22suite.
    3123.PP
    3224The
    3325vfs_full_audit
    3426VFS module records selected client operations to the system log using
    35 \fBsyslog\fR(3).
     27\fBsyslog\fR(3).
    3628.PP
    3729vfs_full_audit
    3830is able to record the complete set of Samba VFS operations:
    39 .IP "" 3n
     31.IP ""
    4032aio_cancel
    41 .IP "" 3n
     33.IP ""
    4234aio_error
    43 .IP "" 3n
     35.IP ""
    4436aio_fsync
    45 .IP "" 3n
     37.IP ""
    4638aio_read
    47 .IP "" 3n
     39.IP ""
    4840aio_return
    49 .IP "" 3n
     41.IP ""
    5042aio_suspend
    51 .IP "" 3n
     43.IP ""
    5244aio_write
    53 .IP "" 3n
     45.IP ""
    5446chdir
    55 .IP "" 3n
     47.IP ""
    5648chflags
    57 .IP "" 3n
     49.IP ""
    5850chmod
    59 .IP "" 3n
     51.IP ""
    6052chmod_acl
    61 .IP "" 3n
     53.IP ""
    6254chown
    63 .IP "" 3n
     55.IP ""
    6456close
    65 .IP "" 3n
     57.IP ""
    6658closedir
    67 .IP "" 3n
     59.IP ""
    6860connect
    69 .IP "" 3n
     61.IP ""
    7062disconnect
    71 .IP "" 3n
     63.IP ""
    7264disk_free
    73 .IP "" 3n
     65.IP ""
    7466fchmod
    75 .IP "" 3n
     67.IP ""
    7668fchmod_acl
    77 .IP "" 3n
     69.IP ""
    7870fchown
    79 .IP "" 3n
     71.IP ""
    8072fget_nt_acl
    81 .IP "" 3n
     73.IP ""
    8274fgetxattr
    83 .IP "" 3n
     75.IP ""
    8476flistxattr
    85 .IP "" 3n
     77.IP ""
    8678fremovexattr
    87 .IP "" 3n
     79.IP ""
    8880fset_nt_acl
    89 .IP "" 3n
     81.IP ""
    9082fsetxattr
    91 .IP "" 3n
     83.IP ""
    9284fstat
    93 .IP "" 3n
     85.IP ""
    9486fsync
    95 .IP "" 3n
     87.IP ""
    9688ftruncate
    97 .IP "" 3n
     89.IP ""
    9890get_nt_acl
    99 .IP "" 3n
     91.IP ""
    10092get_quota
    101 .IP "" 3n
     93.IP ""
    10294get_shadow_copy_data
    103 .IP "" 3n
     95.IP ""
    10496getlock
    105 .IP "" 3n
     97.IP ""
    10698getwd
    107 .IP "" 3n
     99.IP ""
    108100getxattr
    109 .IP "" 3n
     101.IP ""
    110102kernel_flock
    111 .IP "" 3n
     103.IP ""
    112104lgetxattr
    113 .IP "" 3n
     105.IP ""
    114106link
    115 .IP "" 3n
     107.IP ""
    116108linux_setlease
    117 .IP "" 3n
     109.IP ""
    118110listxattr
    119 .IP "" 3n
     111.IP ""
    120112llistxattr
    121 .IP "" 3n
     113.IP ""
    122114lock
    123 .IP "" 3n
     115.IP ""
    124116lremovexattr
    125 .IP "" 3n
     117.IP ""
    126118lseek
    127 .IP "" 3n
     119.IP ""
    128120lsetxattr
    129 .IP "" 3n
     121.IP ""
    130122lstat
    131 .IP "" 3n
     123.IP ""
    132124mkdir
    133 .IP "" 3n
     125.IP ""
    134126mknod
    135 .IP "" 3n
     127.IP ""
    136128open
    137 .IP "" 3n
     129.IP ""
    138130opendir
    139 .IP "" 3n
     131.IP ""
    140132pread
    141 .IP "" 3n
     133.IP ""
    142134pwrite
    143 .IP "" 3n
     135.IP ""
    144136read
    145 .IP "" 3n
     137.IP ""
    146138readdir
    147 .IP "" 3n
     139.IP ""
    148140readlink
    149 .IP "" 3n
     141.IP ""
    150142realpath
    151 .IP "" 3n
     143.IP ""
    152144removexattr
    153 .IP "" 3n
     145.IP ""
    154146rename
    155 .IP "" 3n
     147.IP ""
    156148rewinddir
    157 .IP "" 3n
     149.IP ""
    158150rmdir
    159 .IP "" 3n
     151.IP ""
    160152seekdir
    161 .IP "" 3n
     153.IP ""
    162154sendfile
    163 .IP "" 3n
     155.IP ""
    164156set_nt_acl
    165 .IP "" 3n
     157.IP ""
    166158set_quota
    167 .IP "" 3n
     159.IP ""
    168160setxattr
    169 .IP "" 3n
     161.IP ""
    170162stat
    171 .IP "" 3n
     163.IP ""
    172164statvfs
    173 .IP "" 3n
     165.IP ""
    174166symlink
    175 .IP "" 3n
     167.IP ""
    176168sys_acl_add_perm
    177 .IP "" 3n
     169.IP ""
    178170sys_acl_clear_perms
    179 .IP "" 3n
     171.IP ""
    180172sys_acl_create_entry
    181 .IP "" 3n
     173.IP ""
    182174sys_acl_delete_def_file
    183 .IP "" 3n
     175.IP ""
    184176sys_acl_free_acl
    185 .IP "" 3n
     177.IP ""
    186178sys_acl_free_qualifier
    187 .IP "" 3n
     179.IP ""
    188180sys_acl_free_text
    189 .IP "" 3n
     181.IP ""
    190182sys_acl_get_entry
    191 .IP "" 3n
     183.IP ""
    192184sys_acl_get_fd
    193 .IP "" 3n
     185.IP ""
    194186sys_acl_get_file
    195 .IP "" 3n
     187.IP ""
    196188sys_acl_get_perm
    197 .IP "" 3n
     189.IP ""
    198190sys_acl_get_permset
    199 .IP "" 3n
     191.IP ""
    200192sys_acl_get_qualifier
    201 .IP "" 3n
     193.IP ""
    202194sys_acl_get_tag_type
    203 .IP "" 3n
     195.IP ""
    204196sys_acl_init
    205 .IP "" 3n
     197.IP ""
    206198sys_acl_set_fd
    207 .IP "" 3n
     199.IP ""
    208200sys_acl_set_file
    209 .IP "" 3n
     201.IP ""
    210202sys_acl_set_permset
    211 .IP "" 3n
     203.IP ""
    212204sys_acl_set_qualifier
    213 .IP "" 3n
     205.IP ""
    214206sys_acl_set_tag_type
    215 .IP "" 3n
     207.IP ""
    216208sys_acl_to_text
    217 .IP "" 3n
     209.IP ""
    218210sys_acl_valid
    219 .IP "" 3n
     211.IP ""
    220212telldir
    221 .IP "" 3n
     213.IP ""
    222214unlink
    223 .IP "" 3n
     215.IP ""
    224216utime
    225 .IP "" 3n
     217.IP ""
    226218write
    227219.PP
    228220In addition to these operations,
    229221vfs_full_audit
    230 recognizes the special operation names "all" and "none ", which refer to all the VFS operations and none of the VFS operations respectively.
     222recognizes the special operation names "all" and "none ", which refer to all the VFS operations and none of the VFS operations respectively.
    231223.PP
    232224vfs_full_audit
    233 records operations in fixed format consisting of fields separated by '|' characters. The format is:
    234 
     225records operations in fixed format consisting of fields separated by \'|\' characters\. The format is:
     226.sp
     227.RS 4
    235228.nf
    236 
    237229                smbd_audit: PREFIX|OPERATION|RESULT|FILE
    238230       
    239231.fi
     232
    240233.PP
    241234The record fields are:
    242 .TP 3n
    243 \(bu
     235.sp
     236.RS 4
     237.ie n \{\
     238\h'-04'\(bu\h'+03'\c
     239.\}
     240.el \{\
     241.sp -1
     242.IP \(bu 2.3
     243.\}
    244244PREFIX
    245 - the result of the full_audit:prefix string after variable substitutions
    246 .TP 3n
    247 \(bu
     245\- the result of the full_audit:prefix string after variable substitutions
     246.RE
     247.sp
     248.RS 4
     249.ie n \{\
     250\h'-04'\(bu\h'+03'\c
     251.\}
     252.el \{\
     253.sp -1
     254.IP \(bu 2.3
     255.\}
    248256OPERATION
    249 - the name of the VFS operation
    250 .TP 3n
    251 \(bu
     257\- the name of the VFS operation
     258.RE
     259.sp
     260.RS 4
     261.ie n \{\
     262\h'-04'\(bu\h'+03'\c
     263.\}
     264.el \{\
     265.sp -1
     266.IP \(bu 2.3
     267.\}
    252268RESULT
    253 - whether the operation succeeded or failed
    254 .TP 3n
    255 \(bu
     269\- whether the operation succeeded or failed
     270.RE
     271.sp
     272.RS 4
     273.ie n \{\
     274\h'-04'\(bu\h'+03'\c
     275.\}
     276.el \{\
     277.sp -1
     278.IP \(bu 2.3
     279.\}
    256280FILE
    257 - the name of the file or directory the operation was performed on
    258 .PP
    259 This module is stackable.
     281\- the name of the file or directory the operation was performed on
     282.sp
     283.RE
     284.PP
     285This module is stackable\.
    260286.SH "OPTIONS"
    261287.PP
    262288vfs_full_audit:prefix = STRING
    263 .RS 3n
    264 Prepend audit messages with STRING. STRING is processed for standard substitution variables listed in
    265 \fBsmb.conf\fR(5). The default prefix is "%u|%I".
     289.RS
     290Prepend audit messages with STRING. STRING is processed for standard substitution variables listed in
     291\fBsmb.conf\fR(5).
    266292.RE
    267293.PP
    268294vfs_full_audit:success = LIST
    269 .RS 3n
    270 LIST is a list of VFS operations that should be recorded if they succeed. Operations are specified using the names listed above.
     295.RS
     296LIST is a list of VFS operations that should be recorded if they succeed.
    271297.RE
    272298.PP
    273299vfs_full_audit:failure = LIST
    274 .RS 3n
    275 LIST is a list of VFS operations that should be recorded if they failed. Operations are specified using the names listed above.
     300.RS
     301LIST is a list of VFS operations that should be recorded if they failed.
    276302.RE
    277303.PP
    278304full_audit:facility = FACILITY
    279 .RS 3n
     305.RS
    280306Log messages to the named
    281307\fBsyslog\fR(3)
    282 facility.
     308facility.
    283309.RE
    284310.PP
    285311full_audit:priority = PRIORITY
    286 .RS 3n
     312.RS
    287313Log messages with the named
    288314\fBsyslog\fR(3)
    289 priority.
     315priority.
    290316.RE
    291317.SH "EXAMPLES"
    292318.PP
    293319Log file and directory open operations on the [records] share using the LOCAL7 facility and ALERT priority, including the username and IP address:
    294 
     320.sp
     321.RS 4
    295322.nf
    296 
    297323        \fI[records]\fR
    298         path = /data/records
    299         vfs objects = full_audit
    300         full_audit:prefix = %u|%I
    301         full_audit:success = open opendir
    302         full_audit:failure = all
    303         full_audit:facility = LOCAL7
    304         full_audit:priority = ALERT
    305 
     324        \fIpath = /data/records\fR
     325        \fIvfs objects = full_audit\fR
     326        \fIfull_audit:prefix = %u|%I\fR
     327        \fIfull_audit:success = open opendir\fR
     328        \fIfull_audit:failure = all\fR
     329        \fIfull_audit:facility = LOCAL7\fR
     330        \fIfull_audit:priority = ALERT\fR
    306331.fi
     332
    307333.SH "VERSION"
    308334.PP
    309 This man page is correct for version 3.0.25 of the Samba suite.
     335This man page is correct for version 3.
    310336.SH "AUTHOR"
    311337.PP
    312 The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
    313 
     338The original Samba software and related utilities were created by Andrew Tridgell\. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\.
Note: See TracChangeset for help on using the changeset viewer.