Package: wtmpdb Version: 0.72.0-1 Severity: normal Dear Maintainer,
here an `last -x` example output ``` $> wtmpdb last -x -n20 root pts/0 Sat Apr 5 05:09 - still logged in dirk tty7 :0 Sat Apr 5 05:05 - still logged in lightdm tty7 :0 Sat Apr 5 05:04 - 05:05 (00:00) reboot system boot 6.12.20-amd64 Sat Apr 5 05:04 - still running root pts/4 Sat Apr 5 04:16 - 04:16 (00:00) [...] lightdm tty7 :0 Sat Apr 5 01:27 - 01:27 (00:00) reboot system boot 6.12.20-amd64 Sat Apr 5 01:27 - 05:01 (03:33) shutdown system down 6.12.20-amd64 Sat Apr 5 05:01 - 05:04 (00:03) root pts/0 Sat Apr 5 01:26 - 01:26 (00:00) wtmpdb begins Sat Apr 5 01:26:34 2025 ``` Here are 3 issues: 1. Whishlist: For the first column it should be renamed shutdown -> [shutdown] or <shutdown> reboot -> [reboot] or <reboot> to make clear that these are builtin tokens, and not real usernames. 2. The [shutdown] in the example above was from [shutdown] 05:01 - 05:04, followed by a [reboot] at 05:04 - still running but this [shutdown] was ordered before [reboot] at 01:27 - 05:01 which make less sense. The output of example above should look like root pts/0 Sat Apr 5 05:09 - still logged in dirk tty7 :0 Sat Apr 5 05:05 - still logged in lightdm tty7 :0 Sat Apr 5 05:04 - 05:05 (00:00) reboot system boot 6.12.20-amd64 Sat Apr 5 05:04 - still running shutdown system down 6.12.20-amd64 Sat Apr 5 05:01 - 05:04 (00:03) root pts/4 Sat Apr 5 04:16 - 04:16 (00:00) [...] lightdm tty7 :0 Sat Apr 5 01:27 - 01:27 (00:00) reboot system boot 6.12.20-amd64 Sat Apr 5 01:27 - 05:01 (03:33) new> <older shutdown> Sat Apr 5 01:26 - 01:27 (00:00) root pts/0 Sat Apr 5 01:26 - 01:26 (00:00) 3. With respect to bug #1102101 (subtract 1h) * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1102101 the following command should output at least one [shutdown] line $> last -x -s '2025-04-05 03:00:00' root pts/0 Sat Apr 5 05:09 - still logged in dirk tty7 :0 Sat Apr 5 05:05 - still logged in lightdm tty7 :0 Sat Apr 5 05:04 - 05:05 (00:00) reboot system boot 6.12.20-amd64 Sat Apr 5 05:04 - still running root pts/4 Sat Apr 5 04:16 - 04:16 (00:00) wtmpdb begins Fri Apr 4 19:01:21 2025 the `[shutdown] 05:01 - 05:04 (00:03)` is missing. Greets, Dirk =) -- System Information: Debian Release: trixie/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 6.12.20-amd64 (SMP w/20 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages wtmpdb depends on: ii init-system-helpers 1.68 ii libaudit1 1:4.0.2-2+b2 ii libc6 2.41-6 ii libsystemd0 257.4-3 ii libwtmpdb0 0.72.0-1 Versions of packages wtmpdb recommends: ii libpam-wtmpdb 0.72.0-1 wtmpdb suggests no packages. -- no debconf information