Possible bug in 5.1 - su / utmp
Raymond Sundland
raymond at sundland.com
Tue Jun 24 08:11:21 PDT 2003
Nevermind this last email.... from a different box :)
Raymond Sundland wrote:
> In addition to my previous email, I found the following:
>
> % ps auwx |grep login
> root 587 0.0 0.1 1604 1220 p0 Is 5:39AM 0:00.01 login
> [pam] (login)
> root 57250 0.0 0.1 1604 1232 p1 Is 7:44AM 0:00.02 login
> [pam] (login)
> root 6162 0.0 0.1 1604 1236 p2 Ss 11:08AM 0:00.01 login
> [pam] (login)
>
>
> Looks like the login process executed via PAM is not exiting (I had only
> 1 user logged in at this time...), so I guess this is most likely a bug
> in login?
>
> Thanks.
>
> Raymond Sundland wrote:
>
>> I found this very interesting when I saw it originally, but then found
>> it was probably a bug.
>>
>> Basically, when I log into my 5.1-RELEASE box (compiled today from
>> CVS), I can do a 'w' and get the following:
>>
>> % w
>> 10:39AM up 5:01, 1 user, load averages: 0.00, 0.00, 0.00
>> USER TTY FROM LOGIN@ IDLE WHAT
>> ray p0 somehost 10:39AM - w
>>
>> Now, when I try to SU to root, this entry changes:
>>
>> % su -
>> Password:
>> Last login: Tue Jun 24 07:44:19 on ttyp1
>> % whoami
>> root
>> % w
>> 10:40AM up 5:01, 1 user, load averages: 0.04, 0.01, 0.00
>> USER TTY FROM LOGIN@ IDLE WHAT
>> root p0 - 10:40AM - w
>>
>> So, it looks like the utmp entry is being made (again) for ttyp0 and
>> recording it. This would be fine from my perspective, but is
>> misleading once I exit the root shell:
>>
>> % exit
>> % whoami
>> ray
>> % w
>> 10:42AM up 5:03, 1 user, load averages: 0.01, 0.00, 0.00
>> USER TTY FROM LOGIN@ IDLE WHAT
>> root p0 - 10:40AM - w
>>
>>
>> This may be a bug in PAM, since I don't think su calls login (or maybe
>> it does?) Note that this does not happen if I do not use the '-'
>> option for su. This also shows up in the lastlog:
>>
>> root ttyp2 Tue Jun 24 10:40 - 10:43
>> (00:02)
>> ray ttyp2 somehost Tue Jun 24 10:39 - 10:40
>> (00:00)
>>
>> Anyone have any information about this... know what the bug is? Maybe
>> it's a setting I have set that can be changed?
>>
>> Thanks.
>>
>> _______________________________________________
>> freebsd-questions at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to
>> "freebsd-questions-unsubscribe at freebsd.org"
>
>
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions
mailing list