Help answer threads with 0 replies.
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 02-09-2008, 08:20 AM   #1
LQ Newbie
Registered: Feb 2008
Posts: 1

Rep: Reputation: 0
auth.log questions


I have just setup a debian ftp server for our family to share photos and I'm trying to make it as secure as possible. While looking at the auth.log file there are some lines that concern me.

Feb 9 06:25:01 server CRON[2367]: (pam_unix) session opened for user root by (uid=0)

Feb 9 06:25:02 server su[2414]: Successful su for nobody by root
Feb 9 06:25:02 server su[2414]: + ??? root:nobody

No one was using this computer at the time of these logs. Is this something I should be worried about or is this just something a service is doing?

Thanks for any info you can give.
Old 02-09-2008, 05:38 PM   #2
Senior Member
Registered: May 2006
Location: USA
Distribution: Debian
Posts: 4,824

Rep: Reputation: 613Reputation: 613Reputation: 613Reputation: 613Reputation: 613Reputation: 613
it seems to be CRON running jobs. at that time of day, probably the daily jobs.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
how to logrotate auth.log files? clintcan Linux - Security 1 12-10-2005 05:55 PM
suspicious entry in /var/log/auth.log buehler Linux - Security 5 04-27-2005 06:11 PM
/var/log/auth.log entries buehler Linux - Security 1 04-23-2005 05:45 PM
weird stuff in /var/log/auth.log bschiett Linux - Security 3 03-12-2005 09:29 AM
Auth log tool Kanon Linux - Networking 2 01-01-2005 04:34 PM > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:08 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration