Kicking logged in users...?

[LinuxColonel]

If I'm logged in as root and I issue the who command. How can I kick a user that shows up in the list? Simply want to kick them from the system and end thier current session.

[mangeli]

Originally posted by LinuxColonel:
If I'm logged in as root and I issue the who command. How can I kick a user that shows up in the list? Simply want to kick them from the system and end thier current session.

Why?

[LinuxColonel]

Well, say I'm telnetted into my machine at home while I'm at work. And say theres someone who I don't know logged in, say they hacked my machine. How whould I simpoly boot them and cancel the session.

[ph34r]

Kill their bash session then block their ip using ipchains

[twofoolish2b]

Try using ps -x, then look for something that might say login --username. Do a "kill pid (some number)". Should work.

[The_Stack]

When the Linux kernel has completed initializing then the kernel will start a process called init.

The init process then creates processes using a script file called /etc/inittab. These processes are usually getty processes for each device line that a User may log in.

Each getty process initiates a login process for each user that attempts to log in.

The login process usually starts the User's shell.

You can read all this if you:
man init
man getty
man login

To kill a login session:

first do a who and find out what tty the User is on:

who

then show the process status list and determine which process id is for the shell on the tty.

ps -aux


then finally kill it.


Good Luck!

[LinuxColonel]

Ahh, thank you so much...