The manpage for smb.conf has this in the `veto files` description:
> Each entry must be a unix path, not a DOS path and must *not* include the
> unix directory separator '/'.
This doesn't make a lot of sense to me (so maybe this is a PEBKAC bug). The option accepts an array of '/'-separated strings to match against *files*, not full paths.
I tried to write a better paragraph explaining what the string is:
> Only individual files can be matched, not whole paths. A '/'
> separates match conditions and does not indicate a Unix file path.
At least that's my understanding of the option.