Hi Przemyslaw, > loginctl still listed session 151944 with the same Leader. ... > This produced a false logged-in-user alert in monitoring.
So, you have observed three ill effects: - 'who' (from coreutils) displays an session that is in "closing" state, - 'loginctl' (from systemd) still lists a session, - a logged-in-user alert. Patching the 'who' program will have no effect on what 'loginctl' displays and on notifications/alerts. Therefore IMO you should report the issue to the systemd people, and come back here, to decide what to do about the 'who' program, once they have decided about a resolution of the issue. Thanks. Bruno
