Bug 1811794

Description of problem:

After terminal logging is enabled in sssd the user loses the ability to run the command "who am i" command.

Version-Release number of selected component (if applicable):

tlog-6-1.el8.x86_64

How reproducible:

Always

Steps to Reproduce:

1. follow the steps here to install and configure session recording

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/recording_sessions/index

2. Add user "newuser" and enable session recording for him

# grep newuser /etc/passwd
newuser:x:1001:1001::/home/newuser:/bin/bash

# cat /etc/sssd/conf.d/sssd-session-recording.conf
[session_recording]
scope=some
users=newuser
groups=

# getent passwd newuser
newuser:x:1001:1001::/home/newuser:/usr/bin/tlog-rec-session

3. restart sssd and su to user newuser

Actual results:
--------------------
$ whoami
newuser
$ who am i
<no output>
--------------------

Expected results:
--------------------
$ whoami
newuser
$ who am i
newuser     tty1      2020-02-24 15:18
--------------------

Additional info:

The problem happens because tlog-rec-session allocates a new pseudo-terminal
for the recorded user session. Since the "who" command searches for an entry
corresponding the current terminal in the run/utmp file, that search always
fails.

--------------------
# who
root     pts/0        2020-02-26 17:57 (192.168.122.1)
# tty
/dev/pts/0
# su - newuser
Locale charset is ANSI_X3.4-1968 (ASCII)
Assuming locale environment is lost and charset is UTF-8

ATTENTION! Your session is being recorded!

$ id
uid=1001(newuser) gid=1001(newuser) groups=1001(newuser) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
$ tty
/dev/pts/1
$ ps aufwww|head -n 6
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root      8947  0.0  0.2  26712  5224 pts/0    Ss   17:57   0:00 -bash
root      9356  0.0  0.5 187336 10648 pts/0    S+   18:08   0:00  \_ su - newuser
tlog      9357  0.0  0.4 121780  7488 pts/0    S+   18:08   0:00      \_ -tlog-rec-session
newuser   9358  0.0  0.2  24564  5208 pts/1    Ss   18:08   0:00          \_ -bash
newuser   9436  0.0  0.2  57180  3964 pts/1    R+   18:11   0:00              \_ ps aufwww
$ who am i
$ 
--------------------

The solution requires modifying tlog-rec-session to add an entry in the utmp
file so the heuristics used by the who command succeeds.