I have multiple users logged on my server (ubuntu 12.10), with ssh. None of them has root privileges.
If I then log in with my admin account and type (without sudoing)
the resulting output is:
17:21:05 up 10 days, 18:47, 3 users, load average: 0,09, 0,09, 0,08 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
Now if I type
admin1@server:~$ sudo w
the resulting output is (I changed the IP addresses column, that's not the point here):
17:22:00 up 10 days, 18:48, 3 users, load average: 0,04, 0,07, 0,07 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT admin1 pts/0 XX.XX.XX.XX 16:15 4.00s 0.34s 0.06s sshd: admin1 [priv] user1 pts/1 XX.XX.XX.XX 17:04 17:40 0.17s 0.17s -sh user2 pts/2 XX.XX.XX.XX 14:31 2:50m 0.16s 0.16s -sh
Why that difference? Do I need to be root to see the list of users loggd in with 'w' (but not with 'who'...)?
Unrelated question: what does the first line, last column (sshd: admin [priv]) mean in this case? I read it's relative to sshd privilege separation threads, but that's not clear to me what the line precisely means.