LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Strange messages in the Secure log (https://www.linuxquestions.org/questions/linux-security-4/strange-messages-in-the-secure-log-880382/)

baldur2630 05-12-2011 02:29 PM

Strange messages in the Secure log
 
Suddenly, I'm getting lots of messages in my CentOS 5.6 secure log : -

May 12 13:07:49 CentOS55 webmin[14538]: Successful login as root from 192.168.0.203
May 12 13:10:03 CentOS55 userhelper[14698]: pam_timestamp(system-config-securitylevel:session): updated timestamp file `/var/run/sudo/root/unknown'
May 12 13:10:03 CentOS55 userhelper[14701]: running '/usr/share/system-config-securitylevel/system-config-securitylevel.py' with root privileges on behalf of 'root'
May 12 13:10:55 CentOS55 userhelper[14737]: pam_timestamp(system-config-services:session): updated timestamp file `/var/run/sudo/root/unknown'
May 12 13:10:55 CentOS55 userhelper[14740]: running '/usr/sbin/system-config-services' with root privileges on behalf of 'root'

and

May 12 13:22:33 CentOS55 userhelper[15353]: pam_timestamp(system-config-samba:session): updated timestamp file `/var/run/sudo/root/unknown'
May 12 13:22:33 CentOS55 userhelper[15356]: running '/usr/share/system-config-samba/system-config-samba.py' with root privileges on behalf of 'root'
May 12 17:18:20 CentOS55 webmin[25152]: Successful login as root from 192.168.0.203
May 12 18:09:33 CentOS55 userhelper[27554]: pam_timestamp(system-config-services:session): updated timestamp file `/var/run/sudo/root/unknown'
May 12 18:09:33 CentOS55 userhelper[27557]: running '/usr/sbin/system-config-services' with root privileges on behalf of 'root'
May 12 18:36:00 CentOS55 webmin[29303]: Successful login as root from 192.168.0.203

I've made quite a couple of changes in the mail system and on Samba and I installed patches.

Anyone got any clues as to why I'm getting this? It's fairly recent, it wasn't doing it when I installed it and set it up originally and that wasn't thet long ago.

Noway2 05-12-2011 03:53 PM

I did a search for "userhelper running '/usr/share/system-config-securitylevel/system-config-securitylevel.py'" and got a fair number of hits, some with solutions. A lot of the information seems context specific and possibly related to SELinux, so it is difficult for me to suggest one result over another. You might want to take a look at some of the results and see if anything jumps out at you.


All times are GMT -5. The time now is 03:23 AM.