![Может ли Samba накладывать вето на файлы, за исключением указанного каталога?](https://rvso.com/image/568271/%D0%9C%D0%BE%D0%B6%D0%B5%D1%82%20%D0%BB%D0%B8%20Samba%20%D0%BD%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D1%8B%D0%B2%D0%B0%D1%82%D1%8C%20%D0%B2%D0%B5%D1%82%D0%BE%20%D0%BD%D0%B0%20%D1%84%D0%B0%D0%B9%D0%BB%D1%8B%2C%20%D0%B7%D0%B0%20%D0%B8%D1%81%D0%BA%D0%BB%D1%8E%D1%87%D0%B5%D0%BD%D0%B8%D0%B5%D0%BC%20%D1%83%D0%BA%D0%B0%D0%B7%D0%B0%D0%BD%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BA%D0%B0%D1%82%D0%B0%D0%BB%D0%BE%D0%B3%D0%B0%3F.png)
ОС: Debian 6.0.3 Ядро: 2.6.32-5-adm64 Samba 3.6.1 Вот мой smb.conf
[global]
workgroup = Workgroup
server string = Share Server
hosts allow = 192.168.1.0/24
wins support = yes
dns proxy = no
name resolve order = wins host lmhosts bcast
interfaces = eth0
bind interfaces only = yes
log file = /var/log/samba/log.%m
log level = 2
max log size = 1000
syslog = 0
security = user
encrypt passwords = true
smb passwd file = /etc/samba/smbpasswd
unix password sync = no
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
unix extensions = no
printcap name = /etc/samba/printcap
load printers = no
config file = /etc/samba/smb.conf.%U
[fileshare]
comment = File Share
path = /home/fileshare
read only = no
valid users = @files
browseable = no
writable = yes
write list = @files
create mask = 644
directory mask = 755
guest ok = no
hide dot files = yes
follow symlinks = yes
wide links = yes
veto files = /*.exe/*.com/*.dll/*.mp3/*.avi/*.mkv/*.msi/
Теперь пользователь не может читать/писать exe-файл на /home/fileshare. Я хочу, чтобы каталог /home/fileshare/soft не ограничивался. Я знаю, добавление тега share может сделать это, например
[soft]
comment = software dir
path = /home/fileshare/soft
read only = no
valid users = @files
browseable = no
writable = yes
write list = @files
create mask = 644
directory mask = 755
guest ok = no
hide dot files = yes
follow symlinks = yes
wide links = yes
но я хочу войти на //samba-server/fileshare/soft, а не на //samba-server/soft, есть идеи?