AcctKit 0.99.11

This kit of pieces adds process accounting to the standard Linux
kernel. It contains a diff file relative to the 0.99.11, a new include
file and ports of the BSD NET2 accton and lastcomm commands.

***Important: The lastcomm and accton programs from this kit are part
of the BSD NET2 release. See lastcomm.c and accton.c for the UCB
licensing conditions


To install:

Unpack the source with

gzip -d acctkit-0.99.11.tar.gz | tar -xzvvf -

Note that the linux source is assumed to lie in /usr/src/linux
subdirectory tree. After patching copy .../acctkit-0.99.11/acct.h
to your /usr/src/linux/include/linux directory.

cd /usr/src
patch < acctkit-0.99.11/diffs-0.99.11
cp acctkit-0.99.11/acct.h /usr/src/linux/include/linux/acct.h
cd acctkit-0.99.11
mv accton /etc/accton
mv lastcomm /usr/bin/lastcomm
cp lastcomm.1 /usr/man/man1/lastcomm.1
touch /usr/adm/acct

Build a new kernel.

With this new kernel you can enable accounting with '/etc/accton
/usr/adm/acct'. Disable it with '/etc/accton', and look at command
histories with lastcomm [user].

If you already had accounting running, zap the old accounting file to
0 before starting accounting with new kernel. For example, say:

/etc/accton
cp /dev/null /usr/adm/acct

and then reboot. After that everything should be okay again.


Limitations
-----------

I don't implement memory, pagefault or disk usage logging, just
commands and whether it ran as root. Its enough for my purposes with
our computer society system.

LICENSE
--------
All original code in this kit is placed under the GNU public license.
All other material carries its own copyright messages which you should
check to ensure they are suitable.


THANKS and miscellaneus notes ------------------------------ I found
this package originally as acctkit-0.99.8.tar.Z from nic.funet.fi.
Alan Cox <iiitac@pyr.swan.ac.uk> had done most of the work this far;
Thanks a lot to him.

I just cleaned up the code a little, set up a makefile and made new
diffs against stock linux-0.99.10 and 0.99.11 kernel releases.

New in 0.99.11 -------------- Accounting now supports full length
filenames. This leads into incompatibility with older version and you
must get rid of old accounting information before starting accounting.
I did also some cleanup and added c++ support (even I don't know any
c++ ;-) among other things.

Juha Virtanen, email <Juha.Virtanen@hut.fi>
