*BSD News Article 82684


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!feed1.news.erols.com!howland.erols.net!news.mathworks.com!enews.sgi.com!news.sgi.com!news.tamu.edu!news
From: Yu Feng <yfeng@cs.tamu.edu>
Newsgroups: alt.unix.wizards,comp.unix.admin,comp.unix.bsd.freebsd.misc,comp.unix.questions,relcom.fido.ru.unix
Subject: Re: Strange things happen...
Date: Mon, 11 Nov 1996 23:51:52 -0600
Organization: Texas A&M University, College Station, Texas
Lines: 27
Message-ID: <32881078.4287@cs.tamu.edu>
References: <56791g$i7s@mx.iki.rssi.ru>
NNTP-Posting-Host: sparc23.cs.tamu.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 3.01 (X11; I; SunOS 5.5 sun4c)
Xref: euryale.cc.adfa.oz.au alt.unix.wizards:5716 comp.unix.admin:50169 comp.unix.bsd.freebsd.misc:30911 comp.unix.questions:91059

Sergei A. Golubchik wrote:
> 
> Today, when I logon, I saw some processes
> (midn. commander and X) running
> 'ps' tell me, that they belong to user
> who wasn't logged on now.
> and I know that he could'n do 'nohup'
> (may be he didn't know about this command at all :-) )
> this user was last logged in ('who wtmp') yesterday
> (and I know definitely, he really does)
> 
> now, WHAT DOES IT ALL MEAN ???
> 
> --
> 
> Regards, SerG.

 Is it possible that he ran a program which has "t"(stick bit)
set? or maybe he was running a command with "at" in his .logout
file?

-- 
      __________________________________________________
                       Feng, Yu
         Graduate Student, Dept. of Computer Science
         www_url: http://www.cs.tamu.edu/people/yfeng
      __________________________________________________