The manpage for smb.conf has this in the `veto files` description: > Each entry must be a unix path, not a DOS path and must *not* include the > unix directory separator '/'. This doesn't make a lot of sense to me (so maybe this is a PEBKAC bug). The option accepts an array of '/'-separated strings to match against *files*, not full paths. I tried to write a better paragraph explaining what the string is: > Only individual files can be matched, not whole paths. A '/' > separates match conditions and does not indicate a Unix file path. At least that's my understanding of the option.