From 621bbf3d9c78094f95444f87048d6c023011209f Mon Sep 17 00:00:00 2001 From: Ludwig Lehnert Date: Wed, 18 Feb 2026 18:19:42 +0100 Subject: [PATCH] fixed full_audit config --- app/reconcile_shares.py | 4 ++-- etc/samba/smb.conf | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/app/reconcile_shares.py b/app/reconcile_shares.py index d51447a..8236e4a 100755 --- a/app/reconcile_shares.py +++ b/app/reconcile_shares.py @@ -331,8 +331,8 @@ def render_dynamic_shares(conn: sqlite3.Connection) -> None: "guest ok = no", "vfs objects = acl_xattr full_audit", "full_audit:prefix = %T|%u|%I|%m|%S", - "full_audit:success = connect disconnect opendir readdir mkdir rmdir open close read pread write pwrite unlink rename", - "full_audit:failure = connect opendir readdir mkdir rmdir open read pread write pwrite unlink rename", + "full_audit:success = all", + "full_audit:failure = all", "full_audit:syslog = false", f"valid users = {valid_users}", "create mask = 0660", diff --git a/etc/samba/smb.conf b/etc/samba/smb.conf index b8b68f0..1f715af 100644 --- a/etc/samba/smb.conf +++ b/etc/samba/smb.conf @@ -45,8 +45,8 @@ guest ok = no vfs objects = acl_xattr full_audit full_audit:prefix = %T|%u|%I|%m|%S - full_audit:success = connect disconnect opendir readdir mkdir rmdir open close read pread write pwrite unlink rename - full_audit:failure = connect opendir readdir mkdir rmdir open read pread write pwrite unlink rename + full_audit:success = all + full_audit:failure = all full_audit:syslog = false valid users = +"${DOMAIN_USERS_GROUP}" admin users = +"${DOMAIN_ADMINS_GROUP}" @@ -61,8 +61,8 @@ guest ok = no vfs objects = acl_xattr full_audit full_audit:prefix = %T|%u|%I|%m|%S - full_audit:success = connect disconnect opendir readdir mkdir rmdir open close read pread write pwrite unlink rename - full_audit:failure = connect opendir readdir mkdir rmdir open read pread write pwrite unlink rename + full_audit:success = all + full_audit:failure = all full_audit:syslog = false valid users = +"${PUBLIC_GROUP}" force group = "${PUBLIC_GROUP}"