Any way to log all process launches?

[Richard Morse]

On 8 Apr 2005, at 10:41 AM, Giorgos Keramidas wrote:

> On 2005-04-08 10:32, Richard Morse <remorse at partners.org> wrote:
>> Hi!  I'm trying to track down an odd problem, for which it would be
>> very useful to be able to have the computer keep track of every
>> process that gets created -- ie, keep a list of every fork / exec that
>> occurs.  Is this possible?
>
> Yes, it is possible.  This is part of what `process accounting' does.
>
> Look at the manpages of accton(8), lastcomm(1); then check the
> accounting_enable knob in rc.conf(5) and /etc/defaults/rc.conf

Thanks!  I was looking under logging and auditing and tracing -- not 
accounting...

Ricky