From owner-freebsd-hackers Thu Apr 26 4:44:46 2001 Delivered-To: freebsd-hackers@freebsd.org Received: from tigerdyr.lyngbol.dk (tigerdyr.lyngbol.dk [193.162.142.120]) by hub.freebsd.org (Postfix) with ESMTP id C592337B422 for ; Thu, 26 Apr 2001 04:44:43 -0700 (PDT) (envelope-from lyngbol@tigerdyr.lyngbol.dk) Received: by tigerdyr.lyngbol.dk (Postfix, from userid 1001) id 91BAA9911; Thu, 26 Apr 2001 13:44:42 +0200 (CEST) Date: Thu, 26 Apr 2001 13:44:42 +0200 From: =?iso-8859-1?Q?Michael_Lyngb=F8l?= To: Dima Dorfman Cc: hackers@freebsd.org Subject: Re: Getting a list of users logged in at a certain time (patch) Message-ID: <20010426134442.E81341@tigerdyr.lyngbol.dk> References: <20010426063436.6654A3E2A@bazooka.unixfreak.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010426063436.6654A3E2A@bazooka.unixfreak.org>; from dima@unixfreak.org on Wed, Apr 25, 2001 at 11:34:36PM -0700 X-Operating-System: FreeBSD/i386 4.2-STABLE X-PGP-Fingerprint: AA 2C 9C 13 97 C7 91 58 7E 6E 2A DC 11 E4 E7 F1 X-PGP-Public-Key: finger lyngbol@tigerdyr.lyngbol.dk Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On 25.04.2001 23:34:36 +0000, Dima Dorfman wrote: > OpenBSD's last(1) has a nice snapshot feature which allows one to get > a list of users logged in at a certain date and time. This is very > useful, e.g., for security auditing: you see a message in a log, and > want to know who could've caused it. Assuming that it was something > that must've been done locally, using this feature you can narrow the > list down to a the users that were logged in. It isn't perfect, but > it's a start. > > Attached is a patch which implements this feature in FreeBSD's > last(1). I copied most of the "meat" from OpenBSD, but our last(1) > still looks nothing like theirs, and the delta is larger than it > should've been: surprisingly, our last(1) is quite a bit more mature > (e.g., internationalization). > > Comments? Suggestions? It's a feature I'd appriciate. I'm no C-meistro but it looks fine to me. Best regards /Michael To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message