Bug 2451 - Module vfs_full_audit logs unwanted operation types
Module vfs_full_audit logs unwanted operation types
Status: CLOSED FIXED
Product: Samba 3.0
Classification: Unclassified
Component: File Services
3.0.10
x86 Linux
: P3 normal
: none
Assigned To: Samba Bugzilla Account
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2005-03-15 05:10 UTC by Eloi Granado
Modified: 2005-08-24 10:24 UTC (History)
0 users

See Also:


Attachments
Fix I applied. (1.95 KB, patch)
2005-03-15 17:40 UTC, Jeremy Allison
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Eloi Granado 2005-03-15 05:10:43 UTC
With this configuration :  
   full_audit:prefix = %I|%m|%U  
   full_audit:success = mkdir rmdir open close write pwrite sendfile rename  
unlink utime ftruncate symlink link  
   full_audit:failure = opendir readdir seekdir telldir rewinddir mkdir rmdir  
closedir open close read pread write pwrite lseek sendfile rename fsync  
unlinkchmod fchmod chown fchown chdir getwd utime ftruncate lock symlink  
readlink link mknod realpath  
  
It generates log entries like this:  
Mar 15 12:59:46 servername smbd_audit: clientip|clientname|clientuser|stat| 
fail (No such file or directory)|path/to/a/directory/*  
  
May have something to do with the array vfs_op_names in the file  
source/modules/vfs_full_audit.c. Operations don't seem to match the order of  
vfs_ops in source/include/vfs.h.
Comment 1 Jeremy Allison 2005-03-15 17:40:22 UTC
Created attachment 1035 [details]
Fix I applied.

Fix I applied.
Comment 2 Jeremy Allison 2005-03-15 17:42:59 UTC
I think the applied patch fixes the problem. Please re-open if not.
Jeremy.
Comment 3 Gerald (Jerry) Carter 2005-08-24 10:24:27 UTC
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.