pam_access(crond:account): access denied for user `root' from `cron'

newbie14 · 04-07-2018, 08:15 AM

I checked my logs. I saw a lot of this
Apr 7 21:00:01 localhost crond[33915]: pam_access(crond:account): access denied for user `root' from `cron'

Then I check my access.conf
# User "root" should be allowed to get access via cron .. tty5 tty6.
+ : root : cron crond tty1

but why am I getting this error in my secure logs. Am I am attacked or compromised ?

unSpawn · 04-08-2018, 03:35 AM

Quote:

Originally Posted by newbie14

but why am I getting this error in my secure logs. Am I am attacked or compromised ?

Not sure why (you haven't posted much information) and while it certainly is good to be vigilant please do not immediately assume malicious activity. We've got quite a knowledge base, see if a thread like https://www.linuxquestions.org/quest...ed-4175492110/ helps?