search

mempodippy / vlany

Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
GNU General Public License v3.0
935 stars 193 forks source link

Logged in users are shown twice #4

Closed corefx closed 7 years ago

corefx commented 7 years ago

Hi,

I have noticed this bug when testing vlany on debian 8, ubuntu 14.04 and 16.04 (using virtualbox) See following screenshot: screenshot

mempodippy commented 7 years ago

I've honestly never came across this bug during development.

capture

I don't understand what's causing this, but I'll have a little poke around. 😄

Edit: Comes up when I connect to the box as a normal user. I was always using the VM locally and not over ssh (as a normal user), so that'll be why I've never come across the bug before. Thanks!

Edit 2: who -a gave some weird output, extra lines but with invisible usernames. I assumed these were related, so I hooked some additional utmp functions and edited some existing ones. The output of who -a was fixed, but it seems running w or who still glitches out and shows the same user logged in twice.

Edit 3: Bug fixed. Closing issue.