Tom Diehl on 15 Jan 2005 17:19:00 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[PLUG] Re: what is this?


On Sat, 15 Jan 2005, Doug Crompton wrote:

> I have noticed an entry in my log as follows...
> 
> Jan 15 00:15:18 bridget su: (to root) root on none
> Jan 15 00:15:18 bridget PAM-unix2[13849]: session started for user root,
> service su
> Jan 15 00:16:34 bridget PAM-unix2[13849]: session finished for user root,
> service su

When you looked for cron jobs did you look in /etc/crontab, /etc/cron.daily,
/etc/cron.d, as well as /var/spool/cron?? 

Cronjobs can hide from you, unless you know all of the places to look.

What is /var/log/cron? If it is running from cron it should show there.

Tom Diehl		tdiehl@rogueind.com		Spamtrap address mtd123@rogueind.com
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug