ACCT(2) | System Calls Manual | ACCT(2) |
acct
—
#include <unistd.h>
int
acct
(const
char *file);
acct
() call enables or disables the collection of
system accounting records. If file is
NULL
, accounting is disabled. If
file is an existing, NUL-terminated, pathname, record
collection is enabled, and for every process initiated which terminates under
normal conditions an accounting record is appended to
file. Abnormal conditions of termination are reboots or
other fatal system problems. Records for processes which never terminate can
not be produced by acct
().
For more information on the record structure used by
acct
(), see
/usr/include/sys/acct.h and
acct(5).
This call is permitted only to the super-user.
acct
() creates a kernel
thread called “acctwatch”.
acct
() will fail if one of the following is true:
EACCES
]EFAULT
]EIO
]ELOOP
]ENAMETOOLONG
]NAME_MAX
}
characters, or an entire path name exceeded
{PATH_MAX
} characters.ENOENT
]ENOTDIR
]EPERM
]EROFS
]Also, acct
() fails if failed to create
kernel thread described above. See
fork(2) for
errno value.
acct
() function call appeared in
Version 7 AT&T UNIX.
June 4, 1993 | NetBSD 9.0 |