Re: 'su by nobody' - should I be worried?

2004-04-01 Thread Matthijs
On Wed, 31 Mar 2004 00:40:19 +0200, Martin Dickopp <[EMAIL PROTECTED]> wrote: > Matthijs <[EMAIL PROTECTED]> writes: > > > Since a few days, Logcheck reports a lot of messages like this: > > > > - > > Security Violations for su >

Re: 'su by nobody' - should I be worried?

2004-03-30 Thread p
On Tue, Mar 30, 2004 at 10:55:29PM +0200, Matthijs wrote: > Since a few days, Logcheck reports a lot of messages like this: > > - > Security Violations for su > =-=-=-=-=-=-=-=-=-=-=-=-=- > Mar 30 06:25:02 MyMail su[13083]: (pam_u

Re: 'su by nobody' - should I be worried?

2004-03-30 Thread Bill Thompson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 30 Mar 2004 22:55:29 +0200 Matthijs <[EMAIL PROTECTED]> wrote: > Since a few days, Logcheck reports a lot of messages like this: > > - > Security Violations for su > =-=-=-=-

Re: 'su by nobody' - should I be worried?

2004-03-30 Thread p
On Tue, Mar 30, 2004 at 10:55:29PM +0200, Matthijs wrote: > Since a few days, Logcheck reports a lot of messages like this: > > - > Security Violations for su > =-=-=-=-=-=-=-=-=-=-=-=-=- > Mar 30 06:25:02 MyMail su[13083]: (pam_u

Re: 'su by nobody' - should I be worried?

2004-03-30 Thread Martin Dickopp
Matthijs <[EMAIL PROTECTED]> writes: > Since a few days, Logcheck reports a lot of messages like this: > > - > Security Violations for su > =-=-=-=-=-=-=-=-=-=-=-=-=- > Mar 30 06:25:02 MyMail su[13083]: (pam_unix) session opened f

'su by nobody' - should I be worried?

2004-03-30 Thread Matthijs
Since a few days, Logcheck reports a lot of messages like this: - Security Violations for su =-=-=-=-=-=-=-=-=-=-=-=-=- Mar 30 06:25:02 MyMail su[13083]: (pam_unix) session opened for user nobody by (uid=0) ---