Complete
Details
Assignee
Andrew WalkerAndrew WalkerReporter
Bug ClerkBug ClerkComponents
Fix versions
Priority
Low
Details
Details
Assignee
Andrew Walker
Andrew WalkerReporter
Bug Clerk
Bug ClerkComponents
Fix versions
Priority
More fields
More fields
More fields
Katalon Platform
Katalon Platform
Katalon Platform
Created January 20, 2021 at 11:08 AM
Updated March 5, 2021 at 5:24 PM
Resolved March 5, 2021 at 5:24 PM
PR: https://github.com/freenas/ports/pull/941
Due to continuing work on Samba's VFS, some operations have changed
name. For example unlink -> unlinkat, mkdir -> mkdirat. The original
design of vfs_full_audit was to log all vfs operations if it
encountered one that was not in its lookup table for ops. This results in
a massive increase in the amount of logging being generated.
This commit expands the lookup table to include an `oldname` string that
the user's configuration can be checked against so that the old name,
e.g. `unlink`, will continue to log the appropriate VFS operation without
configuration change. In the case of totally unknown parameters, deny access
to the share with a log message that auditing is significantly misconfigured.
The reasoning for this is that auditing failure is a significant error and
users should not be granted access until it is resolved.