Re: accouting log rotation

[Jason McIntyre <jmc_(_at_)_kerhand_(_dot_)_co_(_dot_)_uk>]

On Tue, Nov 22, 2005 at 11:54:44AM +0000, Antoine Jacoutot wrote:
> Hi...
> 
> Since there's a new accouting log rotation in current now, wouldn't it be a good
> thing to incorporate the following changes from ac(8) ? Or am I just ignorant ?
> Thanks.
> 
> Antoine
> 
> 
> --- /etc/weekly.orig    Tue Nov 22 12:45:32 2005
> +++ /etc/weekly Tue Nov 22 12:45:56 2005
> @@ -39,6 +39,8 @@
>  echo "Rebuilding whatis databases:"
>  makewhatis
> 
> -# echo ""
> -# echo "Doing login accounting:"
> -# ac -p | sort -nr +1
> +if [ -f /var/account/acct ]; then
> +       echo ""
> +       echo "Doing login accounting:"
> +       ac -p | sort -nr +1
> +fi
> 
> --- /etc/newsyslog.conf.orig    Tue Nov 22 12:48:02 2005
> +++ /etc/newsyslog.conf Tue Nov 22 12:45:01 2005
> @@ -11,7 +11,7 @@
>  /var/log/maillog                       600  7     *    24    Z
>  /var/log/messages                      644  5     30   *     Z
>  /var/log/secure                                600  7     *    168   Z
> -/var/log/wtmp                          644  7     *    168   ZB
> +/var/log/wtmp                          644  7     *    $W6D4 ZB
>  /var/log/xferlog                       640  7     250  *     Z
>  /var/log/ppp.log                       640  7     250  *     Z
>  /var/log/pflog                         600  3     250  *     ZB
> /var/run/pflogd.pid

the hooks for accounting are already contained in /etc/rc - basically
accton(1) will be run if /var/account/acct exists.

whether you wish to have daily/weekly/monthly/... mails or not is your
choice. ac(8) now documents one way to do this.

jmc