Bug 706321

Summary: lastlog shows that user has been logged in while he was not
Product: Red Hat Enterprise Linux 6 Reporter: Miroslav Vadkerti <mvadkert>
Component: shadow-utilsAssignee: Peter Vrabec <pvrabec>
Status: CLOSED ERRATA QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: high Docs Contact:
Priority: high    
Version: 6.0   
Target Milestone: rc   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-12-06 16:27:54 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
fix from fedora none

Description Miroslav Vadkerti 2011-05-20 05:45:08 UTC 
Description of problem:
I just found an very odd behaviour of lastlog on i386 only (I assume this is the only 32bit arch on EL6 available)

# USER=usr$RANDOM; useradd -u 2147483648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr14511         pts/5    freedom.brq.redh Fri May 20 01:22:59 -0400 2011
# USER=usr$RANDOM; useradd -u 2147483648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr166           pts/5    freedom.brq.redh Fri May 20 01:22:59 -0400 2011

As you can see I create a new user with big UID exactly 2^32-1. THis also happens for example for 3147483648, but NOT for 2147483649 or 2147583648, so this is very odd!

# USER=usr$RANDOM; useradd -u 2147583648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr12004                                   **Never logged in**
# USER=usr$RANDOM; useradd -u 2247583648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr5606                                    **Never logged in**
# USER=usr$RANDOM; useradd -u 3247583648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr13946                                   **Never logged in**
# USER=usr$RANDOM; useradd -u 3147483648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr4586          pts/9    localhost        Fri May 20 01:35:13 -0400 2011

Version-Release number of selected component (if applicable):
shadow-utils-4.1.4.2-9.el6

How reproducible:
100%

Steps to Reproduce:
see description  

Actual results:
lastlog shows user logged in 

Expected results:
lastlog shows userd never logged in

Additional info:
Comment 1 Peter Vrabec 2011-05-31 08:02:36 UTC 
Created attachment 501934 [details]
fix from fedora
Comment 4 errata-xmlrpc 2011-12-06 16:27:54 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2011-1650.html