[1914] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Re: Solaris 2.x utmp hole

daemon@ATHENA.MIT.EDU (Matt Henschel)
Sat May 27 11:59:12 1995

Date: Sat, 27 May 1995 09:55:51 -0400 (EDT)
From: Matt Henschel <security@slip.net>
To: Pete Hartman <pwh@bradley.bradley.edu>
Cc: bugtraq@fc.net
In-Reply-To: <199505261507.KAA15336@bradley.bradley.edu>

On Fri, 26 May 1995, Pete Hartman wrote:

> >Me: Why is this a "feature?"
> >SE: For all the 1001 things that init now does, it doesn't "log out" a
> >user when the user hangs up.  The shells have all been hacked to catch
> >all the signals and if they are going to exit, to update the utmp and
> >utmpx files before they go.  The init under SunOS did write logout
> >messages to utmp when the process attached to the tty exited.
> 
> This actually makes some sense.
> 
> The AT&T (now NCR) init code presumably tries to handle logouts itself,
> and frequently fails miserably, if the machine is loaded down.
> 

I run SunOS 4.1.3_U1 here, and it also fails to logout often...

|     Matthew Henschel      |  "There is no such thing  |
|     security@slip.net     |    as a secure system"    |


home help back first fref pref prev next nref lref last post