帮忙看看这个题，答案应该是什么......

pushu115

29.Prior to a system shutdown,the "who" command was executed to identify users who may still be on the system.The output from "who" indicates user."jsmith" is still logged on.However,a "ps" listing shows that user,"jsmith" has absolutely no processes executing on this system.Which of the following is the most likely cause of this situation?

a.the /etc/utmp file is corrupted
b.the ruserd daemon is not currently running
c.the /etc/security/loghist.dir file is corrupted.
d.the user,"jsmith" is logged in but not currently runing any applocations

哪个对？如果是a，/etc/utmp已经corrupted了，who命令应该不能正确显示了吧

老农a

A。