Re: Re: Re: Re: wrapping any given shell

can process accounting log via syslog? If not, this is tricky because if it is just a file on the box, it can be spoofed, right?

Comment on Re: Re: Re: Re: wrapping any given shell

Replies are listed 'Best First'.
Re: Re: Re: Re: Re: wrapping any given shell by Fastolfe (Vicar) on Feb 07, 2001 at 03:32 UTC
Process accounting usually logs to a binary file at, say, `/var/adm/pacct`, which is usually system- or root-owned and kept secure. What do you mean by "spoofed"? Contact your SA or check a book on process accounting for details about various implementations you can use. This is somewhat non-Perl.	[reply] [d/l]