[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Should I be concerned that w/who reported 0 users?



On 14/01/14 10:20, Patrick Wiseman wrote:
> Hi:
> 
> I manage a virtual machine remotely, running Debian stable. Recently,
> both 'w' and 'who' were reporting zero users. The machine had been up
> for 141 days, so I did 'sudo shutdown -r now' and returned to it a few
> minutes later, when 'w' and 'who' reported appropriately. Is this any
> cause for concern?
> 
> Thanks
> Patrick
> 
> 


I would be.... I'd halt it fast, and I'd be carefully reviewing a
known-good backup in a development environment for mistakes/unpatched
vulnerabilities *before* restoring the backup in place of the suspect vm.

Kind regards


Reply to: