LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-12-2011, 02:29 PM   #1
baldur2630
Member
 
Registered: Jan 2007
Location: Belgium
Distribution: CentOS & Ubuntu
Posts: 132

Rep: Reputation: 17
Strange messages in the Secure log


Suddenly, I'm getting lots of messages in my CentOS 5.6 secure log : -

May 12 13:07:49 CentOS55 webmin[14538]: Successful login as root from 192.168.0.203
May 12 13:10:03 CentOS55 userhelper[14698]: pam_timestamp(system-config-securitylevel:session): updated timestamp file `/var/run/sudo/root/unknown'
May 12 13:10:03 CentOS55 userhelper[14701]: running '/usr/share/system-config-securitylevel/system-config-securitylevel.py' with root privileges on behalf of 'root'
May 12 13:10:55 CentOS55 userhelper[14737]: pam_timestamp(system-config-services:session): updated timestamp file `/var/run/sudo/root/unknown'
May 12 13:10:55 CentOS55 userhelper[14740]: running '/usr/sbin/system-config-services' with root privileges on behalf of 'root'

and

May 12 13:22:33 CentOS55 userhelper[15353]: pam_timestamp(system-config-samba:session): updated timestamp file `/var/run/sudo/root/unknown'
May 12 13:22:33 CentOS55 userhelper[15356]: running '/usr/share/system-config-samba/system-config-samba.py' with root privileges on behalf of 'root'
May 12 17:18:20 CentOS55 webmin[25152]: Successful login as root from 192.168.0.203
May 12 18:09:33 CentOS55 userhelper[27554]: pam_timestamp(system-config-services:session): updated timestamp file `/var/run/sudo/root/unknown'
May 12 18:09:33 CentOS55 userhelper[27557]: running '/usr/sbin/system-config-services' with root privileges on behalf of 'root'
May 12 18:36:00 CentOS55 webmin[29303]: Successful login as root from 192.168.0.203

I've made quite a couple of changes in the mail system and on Samba and I installed patches.

Anyone got any clues as to why I'm getting this? It's fairly recent, it wasn't doing it when I installed it and set it up originally and that wasn't thet long ago.
 
Old 05-12-2011, 03:53 PM   #2
Noway2
Senior Member
 
Registered: Jul 2007
Distribution: Gentoo
Posts: 2,125

Rep: Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781
I did a search for "userhelper running '/usr/share/system-config-securitylevel/system-config-securitylevel.py'" and got a fair number of hits, some with solutions. A lot of the information seems context specific and possibly related to SELinux, so it is difficult for me to suggest one result over another. You might want to take a look at some of the results and see if anything jumps out at you.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Strange sshd log messages sorenp Linux - Security 3 04-19-2007 12:58 PM
strange system log messages ? deft Linux - Security 23 11-13-2004 09:47 AM
strange info in /var/log/secure.... zepplin611 Linux - Security 1 08-26-2004 08:06 AM
strange logs in /var/log/messages dominant Linux - Security 1 04-21-2004 12:12 PM
Messages log, strange Equis Linux - Security 1 03-28-2004 04:48 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 09:14 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration