AcctKit 0.99.12

This kit of pieces adds process accounting to the standard Linux
kernel. It contains a diff file relative to the 0.99.12, a new include
file and ports of the BSD NET2 accton and lastcomm commands.

***Important: The lastcomm and accton programs from this kit are part
of the BSD NET2 release. See lastcomm.c and accton.c for the UCB
licensing conditions


To install:

Unpack the source with

gzip -d acctkit-0.99.12.tar.gz | tar -xzvvf -

Note that the linux source is assumed to lie in /usr/src/linux
subdirectory tree. After patching copy .../acctkit-0.99.11/acct.h
to your /usr/src/linux/include/linux directory.

cd /usr/src
patch < acctkit-0.99.12/diffs-0.99.12
cp acctkit-0.99.12/acct.h /usr/src/linux/include/linux/acct.h
cd acctkit-0.99.12
mv accton /etc/accton
mv lastcomm /usr/bin/lastcomm
cp lastcomm.1 /usr/man/man1/lastcomm.1
touch /usr/adm/acct

Build a new kernel.

With this new kernel you can enable accounting with command
'/etc/accton /usr/adm/acct'. Disable it with '/etc/accton', and look
at command histories with 'lastcomm [user]'.

If you upgraded from older kernel than 0.99.11 and already had
accounting running, zap the old accounting file to 0 size before
starting accounting with new kernel. For example, say:

/etc/accton
cp /dev/null /usr/adm/acct

and then reboot. After that everything should be okay again.


Limitations
-----------

I don't implement memory, pagefault or disk usage logging, just
commands and whether it ran as root. Its enough for my purposes with
our computer society system.

LICENSE
--------
All original code in this kit is placed under the GNU public license.
All other material carries its own copyright messages which you should
check to ensure they are suitable.


THANKS and miscellaneus notes
------------------------------
I found this package originally as acctkit-0.99.8.tar.Z from
nic.funet.fi.  Alan Cox <iiitac@pyr.swan.ac.uk> had done most of the
work this far; Thanks a lot to him.

I just cleaned up the code a little, set up a makefile and made new
diffs against stock linux 0.99.12 kernel release.

New in 0.99.11
---------------
Accounting now supports full length filenames. This leads into
incompatibility with older version and you must get rid of old
accounting information before starting accounting.  I did also some
cleanup and added c++ support (even I don't know any c++ ;-) among
other things.

New in 0.99.12
---------------
New diffs...


Juha Virtanen, email <Juha.Virtanen@hut.fi>
