Samba 可以否决除指定目录之外的文件吗?

Samba 可以否决除指定目录之外的文件吗?

操作系统:debian 6.0.3 内核:2.6.32-5-adm64 samba 3.6.1 这是我的 smb.conf

[global]
   workgroup = Workgroup
   server string = Share Server
   hosts allow = 192.168.1.0/24
   wins support = yes
   dns proxy = no
   name resolve order = wins host lmhosts bcast
   interfaces = eth0
   bind interfaces only = yes
   log file = /var/log/samba/log.%m
   log level = 2
   max log size = 1000
   syslog = 0
   security = user
   encrypt passwords = true
   smb passwd file = /etc/samba/smbpasswd
   unix password sync = no
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   unix extensions = no
   printcap name = /etc/samba/printcap
   load printers = no
   config file = /etc/samba/smb.conf.%U

[fileshare]
  comment = File Share
  path = /home/fileshare
  read only = no
  valid users = @files
  browseable = no
  writable = yes
  write list = @files
  create mask = 644
  directory mask = 755
  guest ok = no
  hide dot files = yes
  follow symlinks = yes
  wide links = yes
  veto files = /*.exe/*.com/*.dll/*.mp3/*.avi/*.mkv/*.msi/

现在用户无法在 /home/fileshare 上读取/写入 exe 文件。我希望 /home/fileshare/soft 目录不受限制。我知道,添加共享标签可以做到这一点,例如

[soft]
  comment = software dir
  path = /home/fileshare/soft
  read only = no
  valid users = @files
  browseable = no
  writable = yes
  write list = @files
  create mask = 644
  directory mask = 755
  guest ok = no
  hide dot files = yes
  follow symlinks = yes
  wide links = yes

但是我想登录//samba-server/fileshare/soft 而不是//samba-server/soft,有什么想法吗?

相关内容