diff -Nur smeserver-shared-folders-0.1/root/etc/e-smith/templates/etc/smb.conf/shares/45audit smeserver-shared-folders-0.1_mod/root/etc/e-smith/templates/etc/smb.conf/shares/45audit
--- smeserver-shared-folders-0.1/root/etc/e-smith/templates/etc/smb.conf/shares/45audit	2012-10-19 18:53:17.181198983 +0200
+++ smeserver-shared-folders-0.1_mod/root/etc/e-smith/templates/etc/smb.conf/shares/45audit	2012-10-20 12:58:17.846340251 +0200
@@ -3,8 +3,8 @@
     return unless (($share->prop('Audit') || 'enabled') eq 'enabled');
 
     $share_vfs->{full_audit}->{prefix} = "%u|%I|%m|%S";
-    $share_vfs->{full_audit}->{failure} = "connect";
-    $share_vfs->{full_audit}->{success} = "opendir mkdir rmdir open write rename unlink";
+    $share_vfs->{full_audit}->{failure} = "mkdir rmdir chdir open close rename unlink connect disconnect";
+    $share_vfs->{full_audit}->{success} = "mkdir rmdir chdir open close rename unlink connect disconnect";
     $share_vfs->{full_audit}->{facility} = "local5";
     $share_vfs->{full_audit}->{priority} = "notice";
 }