VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /var/lock/samba/gencache.tdb
A: /var/lock/samba/gencache.tdb
R: /var/lock/samba/gencache.tdb
C: /usr/bin/smbclient \\nosuchhost.amanda.org\notashare -U nosuchuser -N -Tx /dev/null 

F: open_wr
S: deny
P: /var/lock/samba/gencache.tdb
A: /var/lock/samba/gencache.tdb
R: /var/lock/samba/gencache.tdb
C: /usr/bin/smbclient \\nosuchhost.amanda.org\notashare -U nosuchuser -N -Tx /dev/null