os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Update the Process Accounting section.

Browse source 
PR:		202203
Reviewed by:	ian
Submitted by:	ian
Differential Revision:	https://reviews.freebsd.org/D20878
This commit is contained in:
Fukang Chen 2019-09-16 01:55:47 +00:00
parent 118a6ec6d8
commit 466b0f1fa3
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=53406
1 changed files with 17 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

21
en_US.ISO8859-1/books/handbook/security/chapter.xml
View file

@ -3567,10 +3567,23 @@ UWWemqWuz3lAZuORQ9KX
<para>Before using process accounting, it must be enabled using
the following commands:</para>
<screen>&prompt.root; <userinput>touch /var/account/acct</userinput>
&prompt.root; <userinput>chmod 600 /var/account/acct</userinput>
&prompt.root; <userinput>accton /var/account/acct</userinput>
&prompt.root; <userinput>sysrc accounting_enable=yes</userinput></screen>
<screen>&prompt.root; <userinput>sysrc accounting_enable=yes</userinput>
&prompt.root; <userinput>service accounting start</userinput></screen>
<para>The accounting information is stored in files located in
<filename>/var/account</filename>, which is automatically created,
if necessary, the first time the accounting service starts.
These files contain sensitive information, including all the
commands issued by all users. Write access to the files is
limited to <systemitem class="username">root</systemitem>,
and read access is limited to <systemitem
class="username">root</systemitem> and members of the
<systemitem class="groupname">wheel</systemitem> group.
To also prevent members of <systemitem
class="groupname">wheel</systemitem> from reading the files,
change the mode of the <filename>/var/account</filename>
directory to allow access only by <systemitem
class="username">root</systemitem>.</para>
<para>Once enabled, accounting will begin to track information
such as <acronym>CPU</acronym> statistics and executed