Changeset 22 for trunk/samba/docs/htmldocs/manpages/vfs_full_audit.8.html
- Timestamp:
- Mar 25, 2007, 5:18:51 PM (19 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/samba/docs/htmldocs/manpages/vfs_full_audit.8.html
r1 r22 3 3 client operations to the system log using 4 4 <a href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a>.</p><p><span><strong class="command">vfs_full_audit</strong></span> is able to record the 5 complete set of Samba VFS operations:</p><table class="simplelist" border="0" summary="Simple list"><tr><td> connect</td></tr><tr><td>disconnect</td></tr><tr><td>disk_free</td></tr><tr><td>get_quota</td></tr><tr><td>set_quota</td></tr><tr><td>get_shadow_copy_data</td></tr><tr><td>statvfs</td></tr><tr><td>opendir</td></tr><tr><td>readdir</td></tr><tr><td>seekdir</td></tr><tr><td>telldir</td></tr><tr><td>rewinddir</td></tr><tr><td>mkdir</td></tr><tr><td>rmdir</td></tr><tr><td>closedir</td></tr><tr><td>open</td></tr><tr><td>close</td></tr><tr><td>read</td></tr><tr><td>pread</td></tr><tr><td>write</td></tr><tr><td>pwrite</td></tr><tr><td>lseek</td></tr><tr><td>sendfile</td></tr><tr><td>rename</td></tr><tr><td>fsync</td></tr><tr><td>stat</td></tr><tr><td>fstat</td></tr><tr><td>lstat</td></tr><tr><td>unlink</td></tr><tr><td>chmod</td></tr><tr><td>fchmod</td></tr><tr><td>chown</td></tr><tr><td>fchown</td></tr><tr><td>chdir</td></tr><tr><td>getwd</td></tr><tr><td>utime</td></tr><tr><td>ftruncate</td></tr><tr><td>lock</td></tr><tr><td>kernel_flock</td></tr><tr><td>linux_setlease</td></tr><tr><td>getlock</td></tr><tr><td>symlink</td></tr><tr><td>readlink</td></tr><tr><td>link</td></tr><tr><td>mknod</td></tr><tr><td>realpath</td></tr><tr><td>fget_nt_acl</td></tr><tr><td>get_nt_acl</td></tr><tr><td>fset_nt_acl</td></tr><tr><td>set_nt_acl</td></tr><tr><td>chmod_acl</td></tr><tr><td>fchmod_acl</td></tr><tr><td>sys_acl_get_entry</td></tr><tr><td>sys_acl_get_tag_type</td></tr><tr><td>sys_acl_get_permset</td></tr><tr><td>sys_acl_get_qualifier</td></tr><tr><td>sys_acl_get_file</td></tr><tr><td>sys_acl_get_fd</td></tr><tr><td>sys_acl_clear_perms</td></tr><tr><td>sys_acl_add_perm</td></tr><tr><td>sys_acl_to_text</td></tr><tr><td>sys_acl_init</td></tr><tr><td>sys_acl_create_entry</td></tr><tr><td>sys_acl_set_tag_type</td></tr><tr><td>sys_acl_set_qualifier</td></tr><tr><td>sys_acl_set_permset</td></tr><tr><td>sys_acl_valid</td></tr><tr><td>sys_acl_set_file</td></tr><tr><td>sys_acl_set_fd</td></tr><tr><td>sys_acl_delete_def_file</td></tr><tr><td>sys_acl_get_perm</td></tr><tr><td>sys_acl_free_text</td></tr><tr><td>sys_acl_free_acl</td></tr><tr><td>sys_acl_free_qualifier</td></tr><tr><td>getxattr</td></tr><tr><td>lgetxattr</td></tr><tr><td>fgetxattr</td></tr><tr><td>listxattr</td></tr><tr><td>llistxattr</td></tr><tr><td>flistxattr</td></tr><tr><td>removexattr</td></tr><tr><td>lremovexattr</td></tr><tr><td>fremovexattr</td></tr><tr><td>setxattr</td></tr><tr><td>lsetxattr</td></tr><tr><td>fsetxattr</td></tr><tr><td>aio_read</td></tr><tr><td>aio_write</td></tr><tr><td>aio_return</td></tr><tr><td>aio_cancel</td></tr><tr><td>aio_error</td></tr><tr><td>aio_fsync</td></tr><tr><td>aio_suspend</td></tr></table><p>In addition to these operations,5 complete set of Samba VFS operations:</p><table class="simplelist" border="0" summary="Simple list"><tr><td></td></tr></table><p>In addition to these operations, 6 6 <span><strong class="command">vfs_full_audit</strong></span> recognizes the special operation 7 7 names "all" and "none ", which refer to all … … 11 11 format is: </p><pre class="programlisting"> 12 12 smbd_audit: PREFIX|OPERATION|RESULT|FILE 13 </pre><p>The record fields are:</p><div class="itemizedlist"><ul type="disc"><li><p><span><strong class="command">PREFIX</strong></span> - the result of the full_audit:prefix string after variable substitutions</p></li><li><p><span><strong class="command">OPERATION</strong></span> - the name of the VFS operation</p></li><li><p><span><strong class="command">RESULT</strong></span> - whether the operation succeeded or failed</p></li><li><p><span><strong class="command">FILE</strong></span> - the name of the file or directory the operation was performed on</p></li></ul></div><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id27177 4"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">vfs_full_audit:prefix = STRING</span></dt><dd><p>Prepend audit messages with STRING. STRING is13 </pre><p>The record fields are:</p><div class="itemizedlist"><ul type="disc"><li><p><span><strong class="command">PREFIX</strong></span> - the result of the full_audit:prefix string after variable substitutions</p></li><li><p><span><strong class="command">OPERATION</strong></span> - the name of the VFS operation</p></li><li><p><span><strong class="command">RESULT</strong></span> - whether the operation succeeded or failed</p></li><li><p><span><strong class="command">FILE</strong></span> - the name of the file or directory the operation was performed on</p></li></ul></div><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id27177"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">vfs_full_audit:prefix = STRING</span></dt><dd><p>Prepend audit messages with STRING. STRING is 14 14 processed for standard substitution variables listed in 15 15 <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>. The default … … 25 25 </p></dd><dt><span class="term">full_audit:priority = PRIORITY</span></dt><dd><p>Log messages with the named 26 26 <a href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a> priority. 27 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2718 79"></a><h2>EXAMPLES</h2><p>Log file and directory open operations on the [records]27 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2718"></a><h2>EXAMPLES</h2><p>Log file and directory open operations on the [records] 28 28 share using the LOCAL7 facility and ALERT priority, including 29 29 the username and IP address:</p><pre class="programlisting"> 30 30 <em class="parameter"><code>[records]</code></em> 31 <a class="indexterm" name="id27190 0"></a>path = /data/records32 <a class="indexterm" name="id2719 07"></a>vfs objects = full_audit33 <a class="indexterm" name="id27191 4"></a>full_audit:prefix = %u|%I34 <a class="indexterm" name="id27192 1"></a>full_audit:success = open opendir35 <a class="indexterm" name="id2719 28"></a>full_audit:failure = all36 <a class="indexterm" name="id27193 5"></a>full_audit:facility = LOCAL737 <a class="indexterm" name="id27194 3"></a>full_audit:priority = ALERT38 </pre></div><div class="refsect1" lang="en"><a name="id27195 2"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.39 </p></div><div class="refsect1" lang="en"><a name="id27196 2"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities31 <a class="indexterm" name="id27190"></a>path = /data/records 32 <a class="indexterm" name="id2719"></a>vfs objects = full_audit 33 <a class="indexterm" name="id27191"></a>full_audit:prefix = %u|%I 34 <a class="indexterm" name="id27192"></a>full_audit:success = open opendir 35 <a class="indexterm" name="id2719"></a>full_audit:failure = all 36 <a class="indexterm" name="id27193"></a>full_audit:facility = LOCAL7 37 <a class="indexterm" name="id27194"></a>full_audit:priority = ALERT 38 </pre></div><div class="refsect1" lang="en"><a name="id27195"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 39 </p></div><div class="refsect1" lang="en"><a name="id27196"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 40 40 were created by Andrew Tridgell. Samba is now developed 41 41 by the Samba Team as an Open Source project similar
Note:
See TracChangeset
for help on using the changeset viewer.
