danl@midget.towson.edu (10/27/89)
I'm running DECwindows UWS 2.1 / Ultrix 3.1 on a VAXstation 3100. When a user finishes using the console and quits from the session manager, Ultrix doesn't think he's logged out. All of his processes are terminated, but it seemes that the session manager "forgets" to delete the entry in the utmp file for the console device, and it doesn't change the ownership on the device file back. Consequently, who, finger, etc. makes it look like users are logged in for days (annoying when it's root that was last to use it), and nimble hackers are looking for ways to exploit the device ownership. I was hoping this would be fixed by the 2.1/3.1 upgrade, but alas, it's still broken. Has anyone else noticed this? Have a fix? Do I just have something set up wrong? Thanx in advance, Dan +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Dan Gosner Internet: danl@midget.towson.edu Operations Manager DGosner@TOE.TOWSON.EDU Towson State University Bitnet: DGosner@TOWSONVX Academic Computing Towson, Maryland 21204 %% VMS pays the bills, but Unix is where my real work gets done. %% ***************************************************************************