[2040] in linux-security and linux-alert archive
[linux-security] strange stuff from 'last'
daemon@ATHENA.MIT.EDU (Sheldon E. Newhouse)
Sat Aug 8 16:41:19 1998
Date: Sat, 8 Aug 1998 08:18:42 -0400
From: "Sheldon E. Newhouse" <sen1@math.msu.edu>
To: linux-security@redhat.com
Resent-From: linux-security@redhat.com
Resent-Reply-To: linux-security@redhat.com
Hi,
Since upgrading from RH-4.2 to RH-5.1, I have regularly noticed the
following strange stuff appearing from last.
ing *4*** ************J\*@ Thu Aug 6 12:46 still logged in
\h*@*** otify ***@ Thu Aug 6 12:46 still logged in
\h*@**** otify ***@ Thu Aug 6 12:46 - 12:46 (00:00)
However notice that 'who' does not report this
lamm tty1 Aug 6 12:46
lamm ttyp2 Aug 6 12:47 (:0.0)
lamm ttyp4 Aug 6 15:05 (:0.0)
lamm ttyp5 Aug 6 14:21 (:0.0)
lamm ttyp9 Aug 6 23:06 (:0.0)
Reboots stop the problem for awhile but then it reappears.
I also read that glibc has sometimes produced corruption in utmp. Do
others notice this strange output of 'last?' Is this a security issue or
more likely just growing pains for utmp and glibc?
Thanks for input,
-sen
--
----------------------------------------------------------------------
Please refer to the information about this list as well as general
information about Linux security at http://www.aoy.com/Linux/Security.
----------------------------------------------------------------------
To unsubscribe:
mail -s unsubscribe linux-security-request@redhat.com < /dev/null
