Re: Auditing with VFS

2002-07-09 Thread Rainer Link

Daniel Niasoff schrieb:
 
 When auditing with VFS the pathname recorded is only the relative path for
 the share not the the full path all the way from root.

int audit_close(struct files_struct *fsp, int fd)
[..]
  fstrcpy(fname, fsp-conn-connectpath);
  fstrcat(fname, /); 
  fstrcat(fname, fsp-fsp_name);
[..]


Should work. HTH

best regards,
Rainer Link

-- 
Rainer Link  | Student of Computer Networking
[EMAIL PROTECTED] | University of Applied Sciences, Furtwangen, Germany
rainer.w3.to | http://www.computer-networking.de/




Re: Auditing with VFS

2002-07-09 Thread Jeremy Allison

On Tue, Jul 09, 2002 at 05:07:30PM +0100, Daniel Niasoff wrote:
 When auditing with VFS the pathname recorded is only the relative path for
 the share not the the full path all the way from root.
 
 Are there any plans to change this as I want to use auditing as a method of
 backing up (i:e: record all files that have been written to and back them up
 automatically) and as the path is only relative to the share and I have no
 way of knowing which share is currently being accessed this would be rather
 difficult.

Yes you do know the share  path - it's stored in the connection struct
passed into the VFS calls or pointed to from the files_struct passed
into the VFS calls.

Hope this helps,

Jeremy.