It's a cron job belonging to root that changes its user before it goes to work.
At 11:21 2002-04-05 +0600, Kirill Zverev wrote:
Hi!
I found that in my logs:
Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody
Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody
by (uid=0)
who could use su at six o'clock in the morning?
--
Regards,
Kirill Zverev <mailto:[EMAIL PROTECTED]>
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
