sh ps grep fill up /var/log/account/pacct

[stop-sharing-emails]

That is why /var/log/account/pacct 99% contains such crap as repeting sh ps grep from gxneur.
That makes hard to audit users activity. Besides that leads to permanent disk writes which kill SSD drives.

It would be nice to rewrite process list retrieving code fragment the way it uses a system call instead of invoking shell and external commands.

How to check out:
1. Set up acct service on ubuntu and start it
2. Unload gxneur
3. invoke `lastcomm|head`
4. wait for 5 seconds
5. invoke `lastcomm|head` see there are no ps,sh or grep commands between lastcomm commands
6. Launch gxneur
7. wait for 5 seconds
8. invoke `lastcomm|head` see there are 4 to 5 repeating ps sh grep command sequences before the last lastcomm command

Thank you for you attention.