---
name: "vfs_audit"
section: "8"
platform: "linux"
package: "samba"
version: "2:4.25.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/vfs_audit"
---

# vfs\_audit(8)

record selected Samba VFS operations in the system log

## NAME

vfs\_audit - record selected Samba VFS operations in the system log

## SYNOPSIS

vfs objects = audit

## DESCRIPTION

This VFS module is part of the [**samba**(7)](/samba/7.md) suite.

The vfs\_audit VFS module records selected client operations to the system log using [**syslog**(3)](/syslog/3.md).

The following Samba VFS operations are recorded:

connect

disconnect

opendir

mkdir

rmdir

open

close

rename

unlink

chmod

fchmod

This module is stackable.

## OPTIONS

audit:facility = FACILITY

Log messages to the named [**syslog**(3)](/syslog/3.md) facility.

audit:priority = PRIORITY

Log messages with the named [**syslog**(3)](/syslog/3.md) priority.

## EXAMPLES

Log operations on all shares using the LOCAL1 facility and NOTICE priority:

```
        [global]
	vfs objects = audit
	audit:facility = LOCAL1
	audit:priority = NOTICE
```

## VERSION

This man page is part of version 4.25.1 of the Samba suite.

## AUTHOR

The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.