VFS_AUDIT(8)

🎀 VFS_AUDIT 💅

okay bestie, so like — vfs_audit is the Samba VFS module that records selected VFS operations straight into the system log. basically it's the module that watches what your clients are doing. no cap. 👀✨

---

✨ NAME ✨

vfs_audit — record selected Samba VFS operations in the system log 📝

---

🌸 SYNOPSIS 🌸

vfs objects = audit

---

🦋 DESCRIPTION 🦋

so this VFS module is part of the samba(7) suite, right? and what it does is it takes selected client operations and logs them to the system log using syslog(3). it's giving security camera but for your shares. periodt. 💖

here's the tea on which Samba VFS operations get recorded:

• connect
• disconnect
• opendir
• mkdir
• rmdir
• open
• close
• rename
• unlink
• chmod
• fchmod

This module is stackable. 🔥 (iykyk)

---

👑 OPTIONS 👑

• audit:facility = FACILITY — sends the log messages to the named syslog(3) facility. you pick which syslog bucket they land in 💌
• audit:priority = PRIORITY — logs the messages with the named syslog(3) priority. so like, how loud do you want it ✨

---

🌈 EXAMPLES 🌈

okay so here's how you log operations on all shares using the LOCAL1 facility and NOTICE priority — obsessed with how clean this is:

[global]
vfs objects = audit
audit:facility = LOCAL1
audit:priority = NOTICE

---

💜 VERSION 💜

this man page is part of version 4.24.7-Ubuntu-4.24.7+dfsg-1ubuntu1 of the Samba suite.

---

🫶 AUTHOR 🫶

The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.

---

aaaand that's the whole page bestie, slay 💅 you now know vfs_audit fr fr. this cutie came to you from Samba 4.24.7-Ubuntu-4.24.7+dfs, dated 09/13/2026 — main character energy only 🌟🎀💖