Samba 可以否決指定目錄以外的檔案嗎？

Question

作業系統：debian 6.0.3 核心：2.6.32-5-adm64 samba 3.6.1 這是我的 smb.conf

[global]
   workgroup = Workgroup
   server string = Share Server
   hosts allow = 192.168.1.0/24
   wins support = yes
   dns proxy = no
   name resolve order = wins host lmhosts bcast
   interfaces = eth0
   bind interfaces only = yes
   log file = /var/log/samba/log.%m
   log level = 2
   max log size = 1000
   syslog = 0
   security = user
   encrypt passwords = true
   smb passwd file = /etc/samba/smbpasswd
   unix password sync = no
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   unix extensions = no
   printcap name = /etc/samba/printcap
   load printers = no
   config file = /etc/samba/smb.conf.%U

[fileshare]
  comment = File Share
  path = /home/fileshare
  read only = no
  valid users = @files
  browseable = no
  writable = yes
  write list = @files
  create mask = 644
  directory mask = 755
  guest ok = no
  hide dot files = yes
  follow symlinks = yes
  wide links = yes
  veto files = /*.exe/*.com/*.dll/*.mp3/*.avi/*.mkv/*.msi/

現在使用者無法讀取/寫入 /home/fileshare 上的 exe 檔案。我想要 /home/fileshare/soft 目錄不受限制。我知道，添加共享標籤可以做到這一點，例如

[soft]
  comment = software dir
  path = /home/fileshare/soft
  read only = no
  valid users = @files
  browseable = no
  writable = yes
  write list = @files
  create mask = 644
  directory mask = 755
  guest ok = no
  hide dot files = yes
  follow symlinks = yes
  wide links = yes

但我想登入 //samba-server/fileshare/soft 而不是 //samba-server/soft，有什麼想法嗎？