It's a cron job belonging to root that changes its user before it goes to work.
At 11:21 2002-04-05 +0600, Kirill Zverev wrote: >Hi! > >I found that in my logs: > >Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody >Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody >by (uid=0) > >who could use su at six o'clock in the morning? > >-- >Regards, > Kirill Zverev <mailto:[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
