Is this normal syslog

Gortex · 08-11-2008, 08:19 AM

I was going threw logs and noticed a entry that had me concerned.

Code:

Aug 10 07:35:03 Rppt sudo:     root : TTY=unknown ; PWD=/ ; USER=admins ; COMMAND=/usr/bin/gconftool --get /system/http_proxy/use_http_proxy
Aug 10 07:35:03 Rppt sudo: pam_unix(sudo:session): session opened for user admins by (uid=0)
Aug 10 07:35:03 Rppt sudo: pam_unix(sudo:session): session closed for user admins
Aug 10 07:35:04 Rppt sudo:     root : TTY=unknown ; PWD=/ ; USER=admins ; COMMAND=/usr/bin/gconftool --get /system/http_proxy/host
Aug 10 07:35:04 Rppt sudo: pam_unix(sudo:session): session opened for user admins by (uid=0)
Aug 10 07:35:04 Rppt sudo: pam_unix(sudo:session): session closed for user admins
Aug 10 07:35:04 Rppt sudo:     root : TTY=unknown ; PWD=/ ; USER=admins ; COMMAND=/usr/bin/gconftool --get /system/http_proxy/port

is this normal ?

chort · 08-11-2008, 08:53 AM

Seems like it's probably the result of some network configuration tool that was running in X-windows. Try opening your network control panel and then check the logs again to see if it generated the same sort of entries.