2017-12-17 16:28 CET

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0001858openmediavaultBugpublic2017-11-30 07:26
Assigned Tovotdev 
Product VersionErasmus (3.x) 
Target VersionFixed in Version 
Summary0001858: OMV web GUI does not show SMB/CIFS "rename" audit logs
DescriptionOMV web GUI does not show "rename" logs in System Logs - SMB/CIFS - Audit
Inside SMB/CIFS - Audit page, it only shows pwrite and unlink logs.
Since "rename" log serve also "moving file", if the file is moved to other folder / local PC, the file will be disappear in the original folder and audit log will show nothing about the file.

When checking /var/log/syslog file, the "rename" logs exist:

Steps To Reproduce1 Create SMB/CIFS share folder "SHARENAME" in location "/srv/dev-vdb/PATHNAME"
2 In desktop PC, add OMV share drive from "SHARENAME"
3 In desktop PC, create folder "SUBPATH" in OMV share drive
4 In desktop PC, create file "OLDFILENAME" inside "SUBPATH" in OMV share drive
5 In desktop PC, rename file "OLDFILENAME" inside "SUBPATH" in OMV share drive to "NEWFILENAME"
Additional InformationAudit related session in smb.conf:

vfs objects = full_audit
full_audit:prefix = %u|%I|%m|%P|%S
full_audit:success = mkdir rename unlink rmdir pwrite
full_audit:failure = none
full_audit:facility = local7
full_audit:priority = NOTICE
Tagscifs, gui, smb
Product build3.0.93
Attached Files




dbp (reporter)

"rename" audit logs have one more "|" compare to "pwrite" and "unlink" logs, for separating OLDFILENAME and NEWFILENAME, which maybe the cause to led pattern matching not work

-Issue History
Date Modified Username Field Change
2017-11-30 07:14 dbp New Issue
2017-11-30 07:14 dbp Status new => assigned
2017-11-30 07:14 dbp Assigned To => votdev
2017-11-30 07:14 dbp Tag Attached: cifs
2017-11-30 07:14 dbp Tag Attached: gui
2017-11-30 07:14 dbp Tag Attached: smb
2017-11-30 07:26 dbp Note Added: 0005051
+Issue History