What do I do if I find unauthorized users?

  
                  

If you are worried about illegal users breaking into the system, the easiest way is to check with the w command.

If you really see an illegal user on your system, you can kill his process immediately.

Use vi /etc/passwd to change his password to "*", or change the shell to /sbin/nologin

first use the w command to view the user tty number. Then use the fuser -k tty number (or show pts/*) to kick out

, then use the w command to view the online user, then pkill -kill -t tty such as pkill -kill -t pts/1

Copyright © Windows knowledge All Rights Reserved