ACCT(2) BSD System Calls Manual ACCT(2)
acct -- enable or disable process accounting
acct(const char *file);
The acct() call enables or disables the collection of system accounting
records. If file is NULL, accounting is disabled. If file is an exist-
ing, NUL-terminated pathname, record collection is enabled and for every
process initiated which terminates under normal conditions an accounting
record is appended to file. Abnormal conditions of termination are
reboots or other fatal system problems. Records for processes which
never terminate cannot be produced by acct(). acct() is only available
on kernels compiled with the ACCOUNTING option.
For more information on the record structure used by acct(), see
/usr/include/sys/acct.h and acct(5).
This call is permitted only to the superuser.
Accounting is automatically disabled when the file system the accounting
file resides on runs out of space; it is enabled when space once again
Upon successful completion, the value 0 is returned; otherwise the
value -1 is returned and the global variable errno is set to indicate the
acct() will fail if one of the following is true:
[EPERM] The caller is not the superuser.
[ENOTDIR] A component of the path prefix is not a directory.
[ENAMETOOLONG] A component of a pathname exceeded NAME_MAX charac-
ters, or an entire pathname (including the terminating
NUL) exceeded PATH_MAX bytes.
[ENOENT] The named file does not exist.
[EACCES] Search permission is denied for a component of the
path prefix, or the path name is not a regular file.
[ELOOP] Too many symbolic links were encountered in translat-
ing the pathname.
[EROFS] The named file resides on a read-only file system.
[EFAULT] file points outside the process's allocated address
[EIO] An I/O error occurred while reading from or writing to
the file system.
acct(5), accton(8), sa(8)
An acct() function call appeared in Version 7 AT&T UNIX.
BSD March 28, 2017 BSD