Process accounting maintains an account of every process ever executed.
Process accounting must be compiled into the kernel and enabled once installation is complete.
You can do this easily by installing the required RPM
psacct. Once installed, you will need to enable psacct by either issuing
accton command or configuring the system initialization file
If you wish to disable process accounting, simply issue the
accton command without any arguments.
The following SlideShow provides an example of how to install the RPM to enable and disable process accounting.
The default Red Hat Linux kernel comes precompiled with process accounting turned on.
If you later recompile your kernel, leave the BSD Process Accounting (under General Setup) enabled.
The next lesson explains process auditing.