Where am I? :)

Giorgos Keramidas keramida at ceid.upatras.gr
Sat Mar 4 17:13:40 PST 2006


On 2006-03-04 23:41, Oliver Leitner <Shadow333 at gmx.at> wrote:
>
> Well, it could have different reasons then:
>
> 1. your box has been hacked, and you have a somewhat crippled login or
> shell, try to replace that things with clean ones.
>
> 2. maybe there is something wrong with memory mapping, eventually diag
> your ram, or build a new "kernel".
>
> 3. its just one of those accidently things that happen every 10 years
> once...

No it's a genuine bug.  I can reproduce it here too, on FreeBSD
7.0-CURRENT, using the instructions of Gabor Kovesdan, as you can
see here:

% keramida at flame:/home/keramida$ w
%  3:07AM  up 1 day,  3:12, 3 users, load averages: 0.12, 0.09, 0.03
% USER             TTY      FROM              LOGIN@  IDLE WHAT
% keramida         v2       -                 3:07AM     - w
% keramida at flame:/home/keramida$ tty
% /dev/ttyv2

Here you can see that I'm logged in on ttyv2 (third virtual console).

% keramida at flame:/home/keramida$ login some_fake_user
% Password:
% Login incorrect
% login: keramida
% Last login: Sun Mar  5 03:07:27 on ttyv2
% Copyright (c) 1992-2006 The FreeBSD Project.
% Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
%         The Regents of the University of California. All rights reserved.
%
% FreeBSD 7.0-CURRENT (FLAME) #0: Fri Mar  3 20:13:02 EET 2006
% keramida at flame:/home/keramida$ w
%  3:07AM  up 1 day,  3:13, 3 users, load averages: 0.08, 0.09, 0.03
% USER             TTY      FROM              LOGIN@  IDLE WHAT
% keramida         v2       -                 3:07AM     - w
% keramida at flame:/home/keramida$

Now I'm logged in again on the same terminal, but in a nested login.

% keramida at flame:/home/keramida$ exit
% logout
% keramida at flame:/home/keramida$ w
%  3:07AM  up 1 day,  3:13, 2 users, load averages: 0.08, 0.09, 0.03
% USER             TTY      FROM              LOGIN@  IDLE WHAT
% keramida at flame:/home/keramida$

Done.  I'm gone, and my login record has been wiped from wtmp.



More information about the freebsd-questions mailing list