Bug 706321 - lastlog shows that user has been logged in while he was not
Summary: lastlog shows that user has been logged in while he was not
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: shadow-utils
Version: 6.0
Hardware: i386
OS: Linux
high
high
Target Milestone: rc
: ---
Assignee: Peter Vrabec
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-05-20 05:45 UTC by Miroslav Vadkerti
Modified: 2011-12-06 16:27 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-12-06 16:27:54 UTC
Target Upstream Version:


Attachments (Terms of Use)
fix from fedora (2.25 KB, patch)
2011-05-31 08:02 UTC, Peter Vrabec
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2011:1650 0 normal SHIPPED_LIVE shadow-utils bug fix and enhancement update 2011-12-06 00:50:28 UTC

Description Miroslav Vadkerti 2011-05-20 05:45:08 UTC
Description of problem:
I just found an very odd behaviour of lastlog on i386 only (I assume this is the only 32bit arch on EL6 available)

# USER=usr$RANDOM; useradd -u 2147483648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr14511         pts/5    freedom.brq.redh Fri May 20 01:22:59 -0400 2011
# USER=usr$RANDOM; useradd -u 2147483648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr166           pts/5    freedom.brq.redh Fri May 20 01:22:59 -0400 2011

As you can see I create a new user with big UID exactly 2^32-1. THis also happens for example for 3147483648, but NOT for 2147483649 or 2147583648, so this is very odd!

# USER=usr$RANDOM; useradd -u 2147583648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr12004                                   **Never logged in**
# USER=usr$RANDOM; useradd -u 2247583648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr5606                                    **Never logged in**
# USER=usr$RANDOM; useradd -u 3247583648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr13946                                   **Never logged in**
# USER=usr$RANDOM; useradd -u 3147483648 $USER; lastlog -u $USER; userdel -r $USER
Username         Port     From             Latest
usr4586          pts/9    localhost        Fri May 20 01:35:13 -0400 2011

Version-Release number of selected component (if applicable):
shadow-utils-4.1.4.2-9.el6

How reproducible:
100%

Steps to Reproduce:
see description  

Actual results:
lastlog shows user logged in 

Expected results:
lastlog shows userd never logged in

Additional info:

Comment 1 Peter Vrabec 2011-05-31 08:02:36 UTC
Created attachment 501934 [details]
fix from fedora

Comment 4 errata-xmlrpc 2011-12-06 16:27:54 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2011-1650.html


Note You need to log in before you can comment on or make changes to this bug.