From owner-freebsd-bugs  Sat Aug 22 19:00:09 1998
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id TAA02409
          for freebsd-bugs-outgoing; Sat, 22 Aug 1998 19:00:09 -0700 (PDT)
          (envelope-from owner-freebsd-bugs@FreeBSD.ORG)
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA02384
          for <freebsd-bugs@FreeBSD.org>; Sat, 22 Aug 1998 19:00:04 -0700 (PDT)
          (envelope-from gnats@FreeBSD.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.8.8/8.8.5) id TAA22142;
	Sat, 22 Aug 1998 19:00:00 -0700 (PDT)
Received: from lohi.clinet.fi (lohi.clinet.fi [194.100.0.7])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA02062
          for <FreeBSD-gnats-submit@freebsd.org>; Sat, 22 Aug 1998 18:58:33 -0700 (PDT)
          (envelope-from hsu@mail.clinet.fi)
Received: from katiska.clinet.fi (katiska.clinet.fi [194.100.0.4])
	by lohi.clinet.fi (8.9.1/8.9.0) with ESMTP id EAA17360
	for <FreeBSD-gnats-submit@freebsd.org>; Sun, 23 Aug 1998 04:58:08 +0300 (EEST)
Received: (from root@localhost)
	by katiska.clinet.fi (8.9.0/8.9.0) id EAA15512;
	Sun, 23 Aug 1998 04:57:48 +0300 (EEST)
Message-Id: <199808230157.EAA15512@katiska.clinet.fi>
Date: Sun, 23 Aug 1998 04:57:48 +0300 (EEST)
From: Heikki Suonsivu <hsu@clinet.fi>
Reply-To: hsu@clinet.fi
To: FreeBSD-gnats-submit@FreeBSD.ORG
X-Send-Pr-Version: 3.2
Subject: kern/7722: Changes to acct format
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         7722
>Category:       kern
>Synopsis:       Changes to acct format
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:
>Keywords:
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Sat Aug 22 19:00:00 PDT 1998
>Last-Modified:
>Originator:     Heikki Suonsivu
>Organization:
Clinet, Espoo, Finland
>Release:        FreeBSD 2.2.6-STABLE i386
>Environment:

FreeBSD.

>Description:

Current acct records do not carry information about pid and ppid.  This is
not necessary for traditional accounting purposes, but for tracking
security issues this would be very useful.

Also the command data is very limited (20 characters only).  It might be
helpful to get more information about exec being done, full path, etc.

>How-To-Repeat:

man 5 acct

>Fix:
	
Add pid, ppid and more verbose command format.

>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message