by Scalli » Thu, 11 Feb 1999 04:00:00
When I looked in /var/log/messages, I found this line and it looked strange.
What does it mean? Could this be a security hazard? Thanx.
PAM_pwdb[831]: (su) session opened for user nobody
Feb 7 04:04:09 PAM_pwdb[831]: (su) session closed for user nobody
by Julien SALGA » Thu, 11 Feb 1999 04:00:00
Hi!
:When I looked in /var/log/messages, I found this line and it looked strange.
:What does it mean? Could this be a security hazard? Thanx.
That's a good habit to check your logs...
:PAM_pwdb[831]: (su) session opened for user nobody
:Feb 7 04:04:09 PAM_pwdb[831]: (su) session closed for user nobody
In fact, the most reasonable possibility is that a cron job needs to be run
as user nobody, so root call the corresponding program through su.
This is the case with updatedb (for locate). You should look in your cron
table wether this is the case.
--
Julien
1. Strange messages in /var/log/messages (HD failure??)
I started getting these in myu /var/log/messages the other day.
Does anyone know what they mean? I assume it is talking about hard
disk space? Hopefully not, the drive is quite new.
Jul 21 08:01:00 localhost kernel: 08:08: rw=0, want=170037275,
limit=263152
Thanks.
2. Adding new enlightenment themes to Redhat 6
3. Strange modprobe messages in /var/log/messages
4. chat bug ?
5. Strange log in /var/log/messages about sendmail.
7. How large can /var/log/messages and /var/log/syslog get ?
9. How to close /var/log/syslog and /var/log/messages..
10. innd - strange message in /var/adm/messages
11. Kernel messages in /var/log/messages
12. kdm message in /var/log/messages?
13. identd messages in /var/log/messages