int
acct(
const char *file
)
)
call enables or disables the collection of system accounting
records.
If the argument
file
is a nil pointer, accounting is disabled.
If
file
is an
existing
pathname (null-terminated), record collection is enabled and for
every process initiated which terminates under normal
conditions an accounting record is appended to
file
.
Abnormal conditions of termination are reboots
or other fatal system problems.
Records for processes which never terminate can not be
produced by
acct(
).
For more information on the record structure used by
acct(),
see
/usr/include/sys/acct.h
and
acct(5).
This call is permitted only to the super-user.
)
creates a kernel thread called
``acctwatch''.
)
will fail if one of the following is true:
EPERM
]
ENOTDIR
]
ENAMETOOLONG
]
{NAME_MAX}
characters, or an entire path name exceeded
{PATH_MAX}
characters.
ENOENT
]
EACCES
]
ELOOP
]
EROFS
]
EFAULT
]
file
points outside the process's allocated address space.
EIO
]
)
fails if failed to create kernel thread described above.
See
fork(2)
for
errno
value.
)
function call appeared in
Version 7 AT&T UNIX
.