From owner-freebsd-arch  Wed Jul 25 15:38:43 2001
Delivered-To: freebsd-arch@freebsd.org
Received: from purgatory.unfix.org (purgatory.xs4all.nl [194.109.237.229])
	by hub.freebsd.org (Postfix) with ESMTP
	id 65D8D37B408; Wed, 25 Jul 2001 15:38:32 -0700 (PDT)
	(envelope-from jeroen@unfix.org)
Received: from HELL (hell.unfix.org [::ffff:10.100.13.66])
	by purgatory.unfix.org (Postfix) with ESMTP
	id 418653146; Thu, 26 Jul 2001 00:38:30 +0200 (CEST)
From: "Jeroen Massar" <jeroen@unfix.org>
To: "'Peter C. Lai'" <sirmoo@cowbert.2y.net>
Cc: "'Garance A Drosihn'" <drosih@rpi.edu>,
	"'Matt Dillon'" <dillon@earth.backplane.com>, <arch@FreeBSD.ORG>,
	"'Garrett Wollman'" <wollman@khavrinen.lcs.mit.edu>,
	<brian@FreeBSD.ORG>
Subject: RE: Changes to utmp, wtmp & lastlog entries
Date: Thu, 26 Jul 2001 00:38:14 +0200
Organization: Unfix
Message-ID: <000f01c1155a$7e268c60$420d640a@HELL>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2616
In-Reply-To: <20010725222849.17038.qmail@d170h113.resnet.uconn.edu>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2479.0006
Importance: Normal
Sender: owner-freebsd-arch@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-arch.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-arch>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-arch>
X-Loop: FreeBSD.ORG

Peter C. Lai [mailto:sirmoo@cowbert.2y.net] wrote:

> all true and good, but i think my issue was that suppose a 3rd party 
> application doesn't log correctly at all (in the case i 
> mentioned, it could 
> be the shell's or pam's or sshd's fault (or some combination 
> thereof) that 
> it does not regard HUPing a shell as a proper logout.). 
> Changing the way 
> utmp/wtmp is recorded isn't going to change the data. 
> However, i did say i 
> probably posted to the wrong thread, but it is still related 
> to the issue of 
> erroneous data in lastlog.
<SNIP>

If you want to 'solve' that you will require kernel hooks of some kind
which hook into the begin&exit calls of the task/thread/process.
This way one can also catch broken/crashed applications. Then again
lastlog/who != ps :)

Greets,
 Jeroen


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message