Date: Tue, 24 Jun 2003 11:07:40 -0400 From: Raymond Sundland <raymond@sundland.com> To: freebsd-questions@freebsd.org Subject: Re: Possible bug in 5.1 - su / utmp Message-ID: <3EF8693C.7000803@sundland.com> In-Reply-To: <3EF86901.6090106@sundland.com> References: <3EF86369.3080606@sundland.com> <3EF86901.6090106@sundland.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Nevermind this last email.... from a different box :) Raymond Sundland wrote: > In addition to my previous email, I found the following: > > % ps auwx |grep login > root 587 0.0 0.1 1604 1220 p0 Is 5:39AM 0:00.01 login > [pam] (login) > root 57250 0.0 0.1 1604 1232 p1 Is 7:44AM 0:00.02 login > [pam] (login) > root 6162 0.0 0.1 1604 1236 p2 Ss 11:08AM 0:00.01 login > [pam] (login) > > > Looks like the login process executed via PAM is not exiting (I had only > 1 user logged in at this time...), so I guess this is most likely a bug > in login? > > Thanks. > > Raymond Sundland wrote: > >> I found this very interesting when I saw it originally, but then found >> it was probably a bug. >> >> Basically, when I log into my 5.1-RELEASE box (compiled today from >> CVS), I can do a 'w' and get the following: >> >> % w >> 10:39AM up 5:01, 1 user, load averages: 0.00, 0.00, 0.00 >> USER TTY FROM LOGIN@ IDLE WHAT >> ray p0 somehost 10:39AM - w >> >> Now, when I try to SU to root, this entry changes: >> >> % su - >> Password: >> Last login: Tue Jun 24 07:44:19 on ttyp1 >> % whoami >> root >> % w >> 10:40AM up 5:01, 1 user, load averages: 0.04, 0.01, 0.00 >> USER TTY FROM LOGIN@ IDLE WHAT >> root p0 - 10:40AM - w >> >> So, it looks like the utmp entry is being made (again) for ttyp0 and >> recording it. This would be fine from my perspective, but is >> misleading once I exit the root shell: >> >> % exit >> % whoami >> ray >> % w >> 10:42AM up 5:03, 1 user, load averages: 0.01, 0.00, 0.00 >> USER TTY FROM LOGIN@ IDLE WHAT >> root p0 - 10:40AM - w >> >> >> This may be a bug in PAM, since I don't think su calls login (or maybe >> it does?) Note that this does not happen if I do not use the '-' >> option for su. This also shows up in the lastlog: >> >> root ttyp2 Tue Jun 24 10:40 - 10:43 >> (00:02) >> ray ttyp2 somehost Tue Jun 24 10:39 - 10:40 >> (00:00) >> >> Anyone have any information about this... know what the bug is? Maybe >> it's a setting I have set that can be changed? >> >> Thanks. >> >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to >> "freebsd-questions-unsubscribe@freebsd.org" > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3EF8693C.7000803>