mirror of
https://github.com/openbsd/src.git
synced 2025-01-09 22:38:01 -08:00
156 lines
4.1 KiB
Groff
156 lines
4.1 KiB
Groff
.\" $OpenBSD: lastcomm.1,v 1.28 2024/02/25 00:07:13 deraadt Exp $
|
|
.\" $NetBSD: lastcomm.1,v 1.5 1995/10/22 01:43:41 ghudson Exp $
|
|
.\"
|
|
.\" Copyright (c) 1980, 1990, 1993
|
|
.\" The Regents of the University of California. All rights reserved.
|
|
.\"
|
|
.\" Redistribution and use in source and binary forms, with or without
|
|
.\" modification, are permitted provided that the following conditions
|
|
.\" are met:
|
|
.\" 1. Redistributions of source code must retain the above copyright
|
|
.\" notice, this list of conditions and the following disclaimer.
|
|
.\" 2. Redistributions in binary form must reproduce the above copyright
|
|
.\" notice, this list of conditions and the following disclaimer in the
|
|
.\" documentation and/or other materials provided with the distribution.
|
|
.\" 3. Neither the name of the University nor the names of its contributors
|
|
.\" may be used to endorse or promote products derived from this software
|
|
.\" without specific prior written permission.
|
|
.\"
|
|
.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
.\" ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
.\" SUCH DAMAGE.
|
|
.\"
|
|
.\" @(#)lastcomm.1 8.1 (Berkeley) 6/6/93
|
|
.\"
|
|
.Dd $Mdocdate: February 25 2024 $
|
|
.Dt LASTCOMM 1
|
|
.Os
|
|
.Sh NAME
|
|
.Nm lastcomm
|
|
.Nd show last commands executed in reverse order
|
|
.Sh SYNOPSIS
|
|
.Nm lastcomm
|
|
.Op Fl f Ar file
|
|
.Op Ar command ...
|
|
.Op Ar user ...
|
|
.Op Ar terminal ...
|
|
.Sh DESCRIPTION
|
|
.Nm lastcomm
|
|
gives information on previously executed commands.
|
|
With no arguments,
|
|
.Nm lastcomm
|
|
prints information about all the commands recorded
|
|
during the current accounting file's lifetime.
|
|
.Pp
|
|
The options are as follows:
|
|
.Bl -tag -width Ds
|
|
.It Fl f Ar file
|
|
Read from
|
|
.Ar file
|
|
rather than the default
|
|
accounting file.
|
|
.El
|
|
.Pp
|
|
If called with arguments, only accounting entries with a
|
|
matching
|
|
.Ar command
|
|
name,
|
|
.Ar user
|
|
name,
|
|
or
|
|
.Ar terminal
|
|
name
|
|
are printed.
|
|
So, for example:
|
|
.Pp
|
|
.Dl lastcomm a.out root ttyd0
|
|
.Pp
|
|
would produce a listing of all the
|
|
executions of commands named
|
|
.Pa a.out
|
|
by user
|
|
.Ar root
|
|
on the terminal
|
|
.Ar ttyd0 .
|
|
.Pp
|
|
For each process entry, the following are printed:
|
|
.Pp
|
|
.Bl -bullet -offset indent -compact
|
|
.It
|
|
Name of the user who ran the process.
|
|
.It
|
|
Flags, as accumulated by the system's accounting facilities.
|
|
.It
|
|
Command name under which the process was called.
|
|
.It
|
|
Amount of CPU time used by the process (in seconds).
|
|
.It
|
|
Time the process started.
|
|
.It
|
|
Elapsed time of the process.
|
|
.El
|
|
.Pp
|
|
The flags are encoded as follows:
|
|
.Pp
|
|
.Bl -tag -width 6n -compact -offset indent
|
|
.It Li B
|
|
The command executed an indirect branch to a location that did not
|
|
start with a
|
|
.Ql BTI
|
|
instruction, and terminated with signal
|
|
.Dv SIGILL ,
|
|
.Va code
|
|
.Dv ILL_BTCFI .
|
|
.It Li D
|
|
The command terminated with the generation of a
|
|
.Pa core
|
|
file.
|
|
.It Li F
|
|
The command ran after
|
|
a fork, but without a following
|
|
.Xr execve 2 .
|
|
.It Li M
|
|
The command did a system call from writable memory or the stack
|
|
pointer was not in stack memory.
|
|
.It Li P
|
|
The command was terminated due to a
|
|
.Xr pledge 2
|
|
violation.
|
|
.It Li S
|
|
The command tried to execute a system call from the wrong
|
|
system call instruction, see
|
|
.Xr pinsyscalls 2 .
|
|
.It Li T
|
|
The command did a memory access violation detected by a
|
|
processor trap.
|
|
.It Li U
|
|
The command tried a file access that was prevented by
|
|
.Xr unveil 2 .
|
|
.It Li X
|
|
The command was terminated with a signal.
|
|
.El
|
|
.Sh FILES
|
|
.Bl -tag -width /var/account/acct -compact
|
|
.It Pa /var/account/acct
|
|
default accounting file
|
|
.El
|
|
.Sh SEE ALSO
|
|
.Xr last 1 ,
|
|
.Xr sigaction 2 ,
|
|
.Xr acct 5 ,
|
|
.Xr core 5 ,
|
|
.Xr accton 8
|
|
.Sh HISTORY
|
|
The
|
|
.Nm lastcomm
|
|
command appeared in
|
|
.Bx 3.0 .
|