Re: what's that?

2002-04-05 Thread Karl Breitner
Logrotate is a good candidate, that's what I found when looking at top output. /Karl Kirill Zverev skrev: > Hi! > > I found that in my logs: > > Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody > Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody by > (uid=0) > > wh

Re: what's that?

2002-04-05 Thread Allan Wind
On 2002-04-05 11:21:39, Kirill Zverev wrote: > Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody > Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody by > (uid=0) > > who could use su at six o'clock in the morning? cron, possibly /etc/cron.daily/find: [EMAIL PROTECTED]:

Re: what's that?

2002-04-05 Thread tony mancill
On Fri, 5 Apr 2002, Kirill Zverev wrote: > I found that in my logs: > > Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody > Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody by > (uid=0) > > who could use su at six o'clock in the morning? from /etc/crontab: # m h

Re: what's that?

2002-04-04 Thread James Morgan
It's a cron job belonging to root that changes its user before it goes to work. At 11:21 2002-04-05 +0600, Kirill Zverev wrote: Hi! I found that in my logs: Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody by (uid=0)

what's that?

2002-04-04 Thread Kirill Zverev
Hi! I found that in my logs: Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody by (uid=0) who could use su at six o'clock in the morning? -- Regards, Kirill Zverev -- To UNSUBSCRIBE, ema

Re: what's that?

2002-04-04 Thread Karl Breitner
Logrotate is a good candidate, that's what I found when looking at top output. /Karl Kirill Zverev skrev: > Hi! > > I found that in my logs: > > Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody > Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody by (uid=0) > > who

Re: what's that?

2002-04-04 Thread Allan Wind
On 2002-04-05 11:21:39, Kirill Zverev wrote: > Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody > Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody by (uid=0) > > who could use su at six o'clock in the morning? cron, possibly /etc/cron.daily/find: awind@pawan:/etc$ gr

Re: what's that?

2002-04-04 Thread tony mancill
On Fri, 5 Apr 2002, Kirill Zverev wrote: > I found that in my logs: > > Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody > Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody by (uid=0) > > who could use su at six o'clock in the morning? from /etc/crontab: # m h d

Re: what's that?

2002-04-04 Thread James Morgan
It's a cron job belonging to root that changes its user before it goes to work. At 11:21 2002-04-05 +0600, Kirill Zverev wrote: >Hi! > >I found that in my logs: > >Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody >Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody >by (ui

what's that?

2002-04-04 Thread Kirill Zverev
Hi! I found that in my logs: Apr 4 06:25:01 cmss su[30315]: + ??? root-nobody Apr 4 06:25:01 cmss PAM_unix[30315]: (su) session opened for user nobody by (uid=0) who could use su at six o'clock in the morning? -- Regards, Kirill Zverev -- To UNSUBSCRIBE, ema