Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Feb 2001 09:36:05 +1300
From:      Jonathan Chen <jonathan.chen@itouch.co.nz>
To:        jim@freeze.org
Cc:        questions@FreeBSD.ORG
Subject:   Re: Mysterious user
Message-ID:  <20010214093605.E5731@itouchnz.itouch>
In-Reply-To: <200102120013.TAA08716@CI590846-B.lxintn1.ky.home.com>; from jim@freeze.org on Sun, Feb 11, 2001 at 07:13:27PM -0500
References:  <200102120013.TAA08716@CI590846-B.lxintn1.ky.home.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Feb 11, 2001 at 07:13:27PM -0500, jim@freeze.org wrote:
> I have a mysterious login in my computer. The user cfreeze is shown to be
> logged in, but I know they are not. I have taken the system down to the
> console level and only I (jfreeze) was logged in. But users still showed
> that cfreeze was there. There is no process owned by cfreeze, so I am not
> sure how they can be logged in. Below is the output of 'w'.
> 
> Can someone explain to me what is going on here and how to get rid of this
> mysterious login.
> 
> Thanks
> 
>  jfreeze@eeyore1 -> w
>  6:20PM  up 42 days, 11:41, 3 users, load averages: 0.20, 0.12, 0.05
> USER             TTY      FROM              LOGIN@  IDLE WHAT
> jfreeze          v0       -                 6:16PM     3 xinit
> /home/jfreeze/.xinitrc --
> jfreeze          p1       -                Sat03PM     - ssh
> www.freeze.org -l jim (ssh1)
> cfreeze          p7       -                Sat03PM  2:42 -

It there are no processes owned by `jfreeze', this output would be due
to a slightly corrupted /var/run/utmp file. You should be able to take
it down to single user and:

	cp /dev/null /var/run/utmp

and this will clear it properly.
-- 
Jonathan Chen <jonathan.chen@itouch.co.nz>
----------------------------------------------------------------------
                                                 Vini, vidi, velcro...
                                         I came, I saw, I stuck around


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010214093605.E5731>