LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   "users" question (https://www.linuxquestions.org/questions/linux-security-4/users-question-367696/)

Verbal Kint 09-28-2005 01:00 AM

"users" question
 
Im not sure if I have picked the right forum but here we go. I'm new to Linux and running Fedora 3. I have read that the command "users" shows you who is logged in? When I type "users" using ssh client putty, I get:

[root@linux ~]# users
root root root
[root@linux ~]#

I tried "logout" and that automatically closes my putty terminal but when I go back and type "users", I still have these three root instances. Is this normal or is there a way I can logout all these root accounts that are logged in? I was under the assumption that once I login with putty using my root account and typing "users", I should only see one instance of "root"?

Thanks!

SkyEye 09-28-2005 01:13 AM

I think you should get one entry 'root'. Try login from PuTTY and issue
Code:

w
Check it's output. See wheather there are any other root instances.

Verbal Kint 09-28-2005 01:15 AM

[root@linux ~]# w
02:18:46 up 4:11, 3 users, load average: 0.00, 0.00, 0.03
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
root :0 - 22:13 ?xdm? 5:18 0.35s /usr/X11R6/bin/
root pts/1 - 22:13 4:05m 0.08s 0.08s bash
root pts/3 192.168.1.103 02:18 1.00s 0.13s 0.03s w

SkyEye 09-28-2005 02:16 AM

The last record "root pts/3 192.168.1.103 02:18 1.00s 0.13s 0.03s w" shows your current connection executing w command as root. This is obvious.

Third record "root :0 - 22:13 ?xdm? 5:18 0.35s /usr/X11R6/bin/" is normal if you are using a graphical login in your Linux system. In Fedora, RH runlevel 5 does this. In Debian Sarge runlenels 2-5 does this. I mean you might be having X running.

Second record "root pts/1 - 22:13 4:05m 0.08s 0.08s bash" is the one you should check. This means there is one session open (usually a terminal) as root.

So go to your Linux box and check. I guess you are logged in as root and using a GUI and have a terminal open. Once you close them check again with w.


All times are GMT -5. The time now is 06:20 PM.