acct

acct package allows to activate process accounting in Linux. Installing acct package in Ubuntu activates accounting by default.

• Configuration file: /etc/default/acct
• Logs file: /var/log/account/pacct

Activities

1. Install in Ubuntu acct accounting package and deactivate it changing ACCT_ENABLE="1" to ACCT_ENABLE="0" in /etc/default/acct and stopping it /etc/init.d/acct stop
2. Activate accounting by executing accton on and deactivate it by executing accton off and check status service acct status

grep -w acct /var/log/syslog
Jul 29 14:22:00 machine-name acct[23114]: Turning on process accounting, file set to '/var/log/account/pacct'.
Jul 29 14:22:00 machine-name acct[23114]:  * Done.
Jul 29 15:02:15 machine-name acct[12629]: Turning off process accounting.
Jul 29 15:02:15 machine-name acct[12629]:  * Done.

Related terms

• AWS Cloudtrail
• /run/pacct_source
• PAM
• AAA
• Hardenize

See also

• Audit: acct, atop, tripwire, AIDE, auditd, debsums, AWS Cloudtrail, logwatch, logcheck, Google Santa, Coguard
• AAA: Authc, Authz, Password policy, OAuth, OpenID, OIDC, LDAP, RADIUS, TACACS+, XTACACS, SAML, Secure LDAP, IEEE 802.1X, CHAP, RBAC, MFA, SCIM, Amazon Cognito
• Bash history: history[ -a | -c | -r ], history --help, ~/.bash_history, HISTFILE, HISTSIZE, HISTTIMEFORMAT, HSTR
• Password, Password policy, Change password, Password manager, passwd, PAM, Password cracking, PasswordAuthentication

Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Source: https://en.wikiversity.org/wiki/Linux_server_administration/acct