LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices



Reply
 
Search this Thread
Old 02-09-2008, 08:20 AM   #1
cody85
LQ Newbie
 
Registered: Feb 2008
Posts: 1

Rep: Reputation: 0
auth.log questions


Hi,

I have just setup a debian ftp server for our family to share photos and I'm trying to make it as secure as possible. While looking at the auth.log file there are some lines that concern me.

Feb 9 06:25:01 server CRON[2367]: (pam_unix) session opened for user root by (uid=0)

Feb 9 06:25:02 server su[2414]: Successful su for nobody by root
Feb 9 06:25:02 server su[2414]: + ??? root:nobody

No one was using this computer at the time of these logs. Is this something I should be worried about or is this just something a service is doing?

Thanks for any info you can give.
 
Old 02-09-2008, 05:38 PM   #2
AlucardZero
Senior Member
 
Registered: May 2006
Location: USA
Distribution: Debian
Posts: 4,652

Rep: Reputation: 536Reputation: 536Reputation: 536Reputation: 536Reputation: 536Reputation: 536
it seems to be CRON running jobs. at that time of day, probably the daily jobs.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
how to logrotate auth.log files? clintcan Linux - Security 1 12-10-2005 05:55 PM
suspicious entry in /var/log/auth.log buehler Linux - Security 5 04-27-2005 06:11 PM
/var/log/auth.log entries buehler Linux - Security 1 04-23-2005 05:45 PM
weird stuff in /var/log/auth.log bschiett Linux - Security 3 03-12-2005 09:29 AM
Auth log tool Kanon Linux - Networking 2 01-01-2005 04:34 PM


All times are GMT -5. The time now is 04:41 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration