Turn process accounting on at start up

[Jio]

As part of my project on Linux security, the root checks commands run by users using lastcomm.

Right now I have to turn process accounting on every time I login using "accton".

Please can anyone suggest a way of turning process account on at start up?

Thanks

[w5set]

well the default process accounting (psacct) can be turned off/on at boot time with
chkconfig --levels 2345 psacct on
chkconfig --levels 2345 psacct off
etc...
or it's under start--system settings--servers--psacct (might want to use the edit all runlevels tab under "runlevels") and then start or restart and then save this settings..

[Jio]

Originally Posted by w5set

well the default process accounting (psacct) can be turned off/on at boot time with
chkconfig --levels 2345 psacct on
chkconfig --levels 2345 psacct off
etc...
or it's under start--system settings--servers--psacct (might want to use the edit all runlevels tab under "runlevels") and then start or restart and then save this settings..

I've checked and it shows that process accounting is on at boot time but I still can't log users commands.

I'm logging all run commands by user to a file /var/log/pacct but if I shut down and boot again, this file doesn't log anything until I run "accton /var/log/pacct". I don't want to always run accton, so how do I get this to always log users commands?

Thanks

[w5set]

man ac
man acct
info accounting
man accton