[1914] in bugtraq
Re: Re: Solaris 2.x utmp hole
daemon@ATHENA.MIT.EDU (Matt Henschel)
Sat May 27 11:59:12 1995
Date: Sat, 27 May 1995 09:55:51 -0400 (EDT)
From: Matt Henschel <security@slip.net>
To: Pete Hartman <pwh@bradley.bradley.edu>
Cc: bugtraq@fc.net
In-Reply-To: <199505261507.KAA15336@bradley.bradley.edu>
On Fri, 26 May 1995, Pete Hartman wrote:
> >Me: Why is this a "feature?"
> >SE: For all the 1001 things that init now does, it doesn't "log out" a
> >user when the user hangs up. The shells have all been hacked to catch
> >all the signals and if they are going to exit, to update the utmp and
> >utmpx files before they go. The init under SunOS did write logout
> >messages to utmp when the process attached to the tty exited.
>
> This actually makes some sense.
>
> The AT&T (now NCR) init code presumably tries to handle logouts itself,
> and frequently fails miserably, if the machine is loaded down.
>
I run SunOS 4.1.3_U1 here, and it also fails to logout often...
| Matthew Henschel | "There is no such thing |
| security@slip.net | as a secure system" |