Feb 18 06:25:01 disciple CRON14433: (pam_unix) session closed for user root
Feb 18 06:25:21 disciple su15051: Successful su for nobody by root
Feb 18 06:25:21 disciple su15051: + ??? root:nobody
Feb 18 06:25:21 disciple su15051: (pam_unix) session opened for user nobody by (uid=0)
Feb 18 06:25:21 disciple su15051: (pam_unix) session closed for user nobody
Feb 18 06:25:21 disciple su15055: Successful su for nobody by root
Feb 18 06:25:21 disciple su15055: + ??? root:nobody
Feb 18 06:25:21 disciple su15055: (pam_unix) session opened for user nobody by (uid=0)
Feb 18 06:25:21 disciple su15055: (pam_unix) session closed for user nobody
Feb 18 06:25:21 disciple su15057: Successful su for nobody by root
Feb 18 06:25:21 disciple su15057: + ??? root:nobody
Feb 18 06:25:21 disciple su15057: (pam_unix) session opened for user nobody by (uid=0)
Feb 18 06:25:41 disciple su15057: (pam_unix) session closed for user nobody
Si quelqu'un peu me traduire ça ?
2 réactions
1 De Modesto Alexandre - 18/02/2008, 21:30
Quelqu'un qui s'est connecté en root à ta machine ?
2 De belu - 19/02/2008, 07:45
Après quelques investigation dans mes logs il semblerait que c'est un service (anacron) qui prend les droits root pour s'exécuter. Du moins j'espère que c'est bien ça !