Date: Thu, 26 Apr 2001 13:44:42 +0200 From: =?iso-8859-1?Q?Michael_Lyngb=F8l?= <michael@lyngbol.dk> To: Dima Dorfman <dima@unixfreak.org> Cc: hackers@freebsd.org Subject: Re: Getting a list of users logged in at a certain time (patch) Message-ID: <20010426134442.E81341@tigerdyr.lyngbol.dk> In-Reply-To: <20010426063436.6654A3E2A@bazooka.unixfreak.org>; from dima@unixfreak.org on Wed, Apr 25, 2001 at 11:34:36PM -0700 References: <20010426063436.6654A3E2A@bazooka.unixfreak.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On 25.04.2001 23:34:36 +0000, Dima Dorfman wrote: > OpenBSD's last(1) has a nice snapshot feature which allows one to get > a list of users logged in at a certain date and time. This is very > useful, e.g., for security auditing: you see a message in a log, and > want to know who could've caused it. Assuming that it was something > that must've been done locally, using this feature you can narrow the > list down to a the users that were logged in. It isn't perfect, but > it's a start. > > Attached is a patch which implements this feature in FreeBSD's > last(1). I copied most of the "meat" from OpenBSD, but our last(1) > still looks nothing like theirs, and the delta is larger than it > should've been: surprisingly, our last(1) is quite a bit more mature > (e.g., internationalization). > > Comments? Suggestions? It's a feature I'd appriciate. I'm no C-meistro but it looks fine to me. Best regards /Michael To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010426134442.E81341>