You are correct, rename is what you need and what you will see.
Full list of options is in the manpage for vfs_full_audit.
*Lenard Fudala*
*System Administrator II*
The Mx Group
T 630-654-0170 x 107
7020 High Grove Blvd.
Burr Ridge, IL 60527
www.TheMxGroup.com <http://www.themxgroup.com/>
We help
companies
*excite* markets,
*engage* customers,
*effect* sales &
*embed* value.
On Wed, Jan 10, 2018 at 7:49 AM, Ethy H. Brito via samba <
samba at lists.samba.org> wrote:
>
> Hi
>
> What should I find in audit log file when someone moves directory X to
> inside its sibling Y?
>
> I would expect something like "...|rename|ok|X|Y/X".
> Is that right?
>
> What "full_audit:success" options must be present to log this
move
> operation?
>
> Regards
>
> Ethy
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>