Re: unix question: unknown user logged in? hacked?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




There is a mystery user on a remote system

What lastlog says?

.............. exists on pty/1

What about using lsof?
lsof /dev/pts/*


Aha!  There is no /dev/pts/1 but some piece of that connection still
exists in memory somewhere.

Solution: make another remote connection.  This recreates /dev/pts/1.
Now, follow that with a normal "exit" and it correctly tears down the
connection and the mystery user disappears.

Muchas gracias, Miguel.

:m)


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux