Date: Sun, 5 Mar 2006 03:12:34 +0200 From: Giorgos Keramidas <keramida@ceid.upatras.gr> To: Oliver Leitner <Shadow333@gmx.at> Cc: freebsd@orchid.homeunix.org, Kovesdan Gabor <gabor.kovesdan@t-hosting.hu>, freebsd-questions@freebsd.org Subject: Re: Where am I? :) Message-ID: <20060305011234.GA36522@flame.pc> In-Reply-To: <440A1795.3030904@gmx.at> References: <4408D4D3.4030102@t-hosting.hu> <440A05B0.6070903@gmx.at> <440A10A5.5060205@t-hosting.hu> <440A1443.3090205@orchid.homeunix.org> <440A1795.3030904@gmx.at>
next in thread | previous in thread | raw e-mail | index | archive | help
On 2006-03-04 23:41, Oliver Leitner <Shadow333@gmx.at> wrote: > > Well, it could have different reasons then: > > 1. your box has been hacked, and you have a somewhat crippled login or > shell, try to replace that things with clean ones. > > 2. maybe there is something wrong with memory mapping, eventually diag > your ram, or build a new "kernel". > > 3. its just one of those accidently things that happen every 10 years > once... No it's a genuine bug. I can reproduce it here too, on FreeBSD 7.0-CURRENT, using the instructions of Gabor Kovesdan, as you can see here: % keramida@flame:/home/keramida$ w % 3:07AM up 1 day, 3:12, 3 users, load averages: 0.12, 0.09, 0.03 % USER TTY FROM LOGIN@ IDLE WHAT % keramida v2 - 3:07AM - w % keramida@flame:/home/keramida$ tty % /dev/ttyv2 Here you can see that I'm logged in on ttyv2 (third virtual console). % keramida@flame:/home/keramida$ login some_fake_user % Password: % Login incorrect % login: keramida % Last login: Sun Mar 5 03:07:27 on ttyv2 % Copyright (c) 1992-2006 The FreeBSD Project. % Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 % The Regents of the University of California. All rights reserved. % % FreeBSD 7.0-CURRENT (FLAME) #0: Fri Mar 3 20:13:02 EET 2006 % keramida@flame:/home/keramida$ w % 3:07AM up 1 day, 3:13, 3 users, load averages: 0.08, 0.09, 0.03 % USER TTY FROM LOGIN@ IDLE WHAT % keramida v2 - 3:07AM - w % keramida@flame:/home/keramida$ Now I'm logged in again on the same terminal, but in a nested login. % keramida@flame:/home/keramida$ exit % logout % keramida@flame:/home/keramida$ w % 3:07AM up 1 day, 3:13, 2 users, load averages: 0.08, 0.09, 0.03 % USER TTY FROM LOGIN@ IDLE WHAT % keramida@flame:/home/keramida$ Done. I'm gone, and my login record has been wiped from wtmp.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060305011234.GA36522>