/bin/login

[J.S.Peatfield () damtp cam ac uk (Jon Peatfield)]

Just remove the setuid bit on /bin/login and this "problem" goes away.
(Assuming you have already fixed /etc/utmp,wtmp not to be world writable...)

Not a major security hole, just a bug in applications which trust utmp/wtmp.

 -- Jon