From owner-freebsd-questions@FreeBSD.ORG Sun Mar 5 01:13:40 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7A02F16A420 for ; Sun, 5 Mar 2006 01:13:40 +0000 (GMT) (envelope-from keramida@ceid.upatras.gr) Received: from igloo.linux.gr (igloo.linux.gr [62.1.205.36]) by mx1.FreeBSD.org (Postfix) with ESMTP id A365943D46 for ; Sun, 5 Mar 2006 01:13:39 +0000 (GMT) (envelope-from keramida@ceid.upatras.gr) Received: from flame.pc (patr530-a009.otenet.gr [212.205.215.9]) (authenticated bits=128) by igloo.linux.gr (8.13.5/8.13.5/Debian-3) with ESMTP id k251DM5n007104 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Sun, 5 Mar 2006 03:13:25 +0200 Received: from flame.pc (flame [127.0.0.1]) by flame.pc (8.13.4/8.13.4) with ESMTP id k251CaBd036749; Sun, 5 Mar 2006 03:12:36 +0200 (EET) (envelope-from keramida@ceid.upatras.gr) Received: (from keramida@localhost) by flame.pc (8.13.4/8.13.4/Submit) id k251CZ7a036748; Sun, 5 Mar 2006 03:12:35 +0200 (EET) (envelope-from keramida@ceid.upatras.gr) Date: Sun, 5 Mar 2006 03:12:34 +0200 From: Giorgos Keramidas To: Oliver Leitner Message-ID: <20060305011234.GA36522@flame.pc> References: <4408D4D3.4030102@t-hosting.hu> <440A05B0.6070903@gmx.at> <440A10A5.5060205@t-hosting.hu> <440A1443.3090205@orchid.homeunix.org> <440A1795.3030904@gmx.at> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <440A1795.3030904@gmx.at> X-Hellug-MailScanner: Found to be clean X-Hellug-MailScanner-SpamCheck: not spam, SpamAssassin (score=-3.331, required 5, autolearn=not spam, ALL_TRUSTED -1.80, AWL 0.87, BAYES_00 -2.60, DNS_FROM_RFC_ABUSE 0.20) X-Hellug-MailScanner-From: keramida@ceid.upatras.gr Cc: freebsd@orchid.homeunix.org, Kovesdan Gabor , freebsd-questions@freebsd.org Subject: Re: Where am I? :) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Mar 2006 01:13:40 -0000 On 2006-03-04 23:41, Oliver Leitner wrote: > > Well, it could have different reasons then: > > 1. your box has been hacked, and you have a somewhat crippled login or > shell, try to replace that things with clean ones. > > 2. maybe there is something wrong with memory mapping, eventually diag > your ram, or build a new "kernel". > > 3. its just one of those accidently things that happen every 10 years > once... No it's a genuine bug. I can reproduce it here too, on FreeBSD 7.0-CURRENT, using the instructions of Gabor Kovesdan, as you can see here: % keramida@flame:/home/keramida$ w % 3:07AM up 1 day, 3:12, 3 users, load averages: 0.12, 0.09, 0.03 % USER TTY FROM LOGIN@ IDLE WHAT % keramida v2 - 3:07AM - w % keramida@flame:/home/keramida$ tty % /dev/ttyv2 Here you can see that I'm logged in on ttyv2 (third virtual console). % keramida@flame:/home/keramida$ login some_fake_user % Password: % Login incorrect % login: keramida % Last login: Sun Mar 5 03:07:27 on ttyv2 % Copyright (c) 1992-2006 The FreeBSD Project. % Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 % The Regents of the University of California. All rights reserved. % % FreeBSD 7.0-CURRENT (FLAME) #0: Fri Mar 3 20:13:02 EET 2006 % keramida@flame:/home/keramida$ w % 3:07AM up 1 day, 3:13, 3 users, load averages: 0.08, 0.09, 0.03 % USER TTY FROM LOGIN@ IDLE WHAT % keramida v2 - 3:07AM - w % keramida@flame:/home/keramida$ Now I'm logged in again on the same terminal, but in a nested login. % keramida@flame:/home/keramida$ exit % logout % keramida@flame:/home/keramida$ w % 3:07AM up 1 day, 3:13, 2 users, load averages: 0.08, 0.09, 0.03 % USER TTY FROM LOGIN@ IDLE WHAT % keramida@flame:/home/keramida$ Done. I'm gone, and my login record has been wiped from wtmp.