（未知）用户始终登录我的 centos linux 机器

Question

我正在使用 who 命令查看已登录用户登录到我的系统的结果，我发现非常令人惊讶的是一个名为未知的用户已登录

who 命令的结果：

 myuser    pts/1        Aug  6 20:27 (localhost)
 (unknown) :0          Aug  5 16:25 (:0) 
 myuser    pts/0        Aug  6 00:48 (localhost.localdomain)

但是当我尝试 运行 结果不同时：

20:46:53 up 1 day, 23:11,  3 users,  load average: 1.00, 1.01, 1.05
USER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT
myuser    pts/1    localhost        20:27    5.00s  0.20s  0.03s w
myuser    pts/0    localhost.locald 00:48   19:57m  0.08s  1.71s python2 -m guake.main

我在我的机器上找不到任何名为未知的用户。在尝试 sudo su unknown/"(unknown)"

我试过运行 最后它显示未知用户仍在登录

myuser    pts/1        localhost        Thu Aug  6 20:27   still logged in
myuser    pts/2        :pts/1:S.0       Thu Aug  6 20:15 - 20:16  (00:00)
myuser    pts/1        localhost        Thu Aug  6 20:03 - 20:18  (00:15)
myuser    pts/2        :pts/1:S.0       Thu Aug  6 19:49 - 19:49  (00:00)
myuser    pts/1        localhost        Thu Aug  6 19:47 - 19:49  (00:02)
myuser    pts/1        localhost        Thu Aug  6 19:37 - 19:46  (00:09)
myuser    pts/1        localhost        Thu Aug  6 19:33 - 19:37  (00:03)
myuser    pts/1        :9               Thu Aug  6 19:32 - 19:33  (00:00)
myuser    pts/1        localhost        Thu Aug  6 19:26 - 19:32  (00:05)
myuser    pts/2        :pts/1:S.0       Thu Aug  6 19:22 - 19:22  (00:00)
myuser    pts/1        localhost        Thu Aug  6 19:22 - 19:22  (00:00)
myuser    pts/2        :pts/1:S.0       Thu Aug  6 19:15 - 19:16  (00:00)
myuser    pts/1        localhost        Thu Aug  6 19:15 - 19:16  (00:00)
myuser    pts/2        :pts/1:S.0       Thu Aug  6 19:13 - 19:13  (00:00)
myuser    pts/1        localhost        Thu Aug  6 19:13 - 19:13  (00:00)
myuser    pts/2        :pts/1:S.0       Thu Aug  6 19:12 - 19:13  (00:00)
myuser    pts/2        :pts/1:S.0       Thu Aug  6 19:11 - 19:11  (00:00)
myuser    pts/2        :pts/1:S.0       Thu Aug  6 19:10 - 19:10  (00:00)
myuser    pts/1        localhost        Thu Aug  6 18:37 - 19:13  (00:35)
myuser    pts/1        localhost        Thu Aug  6 18:17 - 18:21  (00:03)
myuser    pts/1        localhost        Thu Aug  6 18:09 - 18:13  (00:03)
myuser    pts/0        localhost.locald Thu Aug  6 00:48   still logged in
myuser    pts/0        localhost.locald Thu Aug  6 00:34 - 00:48  (00:14)
myuser    pts/1        :9               Wed Aug  5 23:01 - 23:01  (00:00)
myuser    pts/0        localhost.locald Wed Aug  5 22:00 - 00:34  (02:34)
myuser    pts/0        localhost        Wed Aug  5 21:06 - 21:06  (00:00)
myuser    pts/0        localhost        Wed Aug  5 20:57 - 20:59  (00:01)
myuser    pts/0        localhost        Wed Aug  5 20:56 - 20:56  (00:00)
myuser    pts/0        localhost        Wed Aug  5 20:56 - 20:56  (00:00)
myuser    pts/0        :9               Wed Aug  5 20:55 - 20:56  (00:00)
myuser    pts/4        localhost        Wed Aug  5 20:14 - 20:55  (00:40)
myuser    pts/4        localhost        Wed Aug  5 20:11 - 20:12  (00:00)
myuser    pts/5        localhost        Wed Aug  5 19:52 - 19:56  (00:04)
myuser    pts/4        localhost        Wed Aug  5 19:29 - 19:31  (00:02)
myuser    pts/2        localhost        Wed Aug  5 18:42 - 19:32  (00:49)
myuser    pts/2        localhost        Wed Aug  5 18:42 - 18:42  (00:00)
myuser    pts/3        :9               Wed Aug  5 18:38 - 18:42  (00:04)
myuser    pts/3        localhost        Wed Aug  5 16:28 - 16:28  (00:00)
myuser    pts/2        :9               Wed Aug  5 16:26 - 16:28  (00:02)
(unknown :0           :0               Wed Aug  5 16:25   still logged in

知道怎么做吗？

Answer 1

我在过去的 Fedora 安装中看到过这个，当我从 tty 启动 X 时（不在 init 5 中） 在 red hat 中，有一个与此问题相关的 bug here（但也许你甚至 运行 不是基于 red hat 的发行版）

看看它，有一些可能的解释，但取决于你运行在你的盒子里

Answer 2

前段时间我在 Fedora 主机上遇到了类似的问题。 就我而言，我发现是 X 系统在 /var/run/utmp.

中创建了一个错误条目

这里是link页面。

也许您没有使用 Fedora，但我建议尝试禁用 X 并检查您是否仍有（未知）用户登录。

希望对您有所帮助。