btmp is missing
Many startup and login programs use system log files to record who did what when...
e.g. login, agetty, and init
HOWEVER, because these files are generally in /var/log and are ROOT ONLY for security, the programs will only use them if they already exist (ie won't create them)...
touch /var/run/utmp /var/log/{btmp,lastlog,wtmp} chgrp -v utmp /var/run/utmp /var/log/lastlog chmod -v 664 /var/run/utmp /var/log/lastlog