Re: [Q] intrusion

On Thu, Jun 15, 2000 at 11:00:12AM -0500 , [EMAIL PROTECTED] wrote: > Hello, > I found on my machine the following message one morning: > > PAM_UNIX[763]: (su) session opened for user www-data by (uid=0) > su [821]: + ??? root-nobody > > PAM_UNIX[821]: (su) session opened for user nobody by (uid=

Re: [Q] intrusion

On Thu, Jun 15, 2000 at 11:00:12AM -0500 , [EMAIL PROTECTED] wrote: > Hello, > I found on my machine the following message one morning: > > PAM_UNIX[763]: (su) session opened for user www-data by (uid=0) > su [821]: + ??? root-nobody > > PAM_UNIX[821]: (su) session opened for user nobody by (uid

Re: [Q] intrusion

> PAM_UNIX[763]: (su) session opened for user www-data by (uid=0) > su [821]: + ??? root-nobody > > PAM_UNIX[821]: (su) session opened for user nobody by (uid=0) > anymore (I do assume that it is an intrusion attack, > unless there is a much simpler explanation for this). No intrusion. It's ju

[Q] intrusion

Hello, I found on my machine the following message one morning: PAM_UNIX[763]: (su) session opened for user www-data by (uid=0) su [821]: + ??? root-nobody PAM_UNIX[821]: (su) session opened for user nobody by (uid=0) This is the first time it happened and since then I upgraded to the latest un

Re: [Q] intrusion

> PAM_UNIX[763]: (su) session opened for user www-data by (uid=0) > su [821]: + ??? root-nobody > > PAM_UNIX[821]: (su) session opened for user nobody by (uid=0) > anymore (I do assume that it is an intrusion attack, > unless there is a much simpler explanation for this). No intrusion. It's j

[Q] intrusion

Hello, I found on my machine the following message one morning: PAM_UNIX[763]: (su) session opened for user www-data by (uid=0) su [821]: + ??? root-nobody PAM_UNIX[821]: (su) session opened for user nobody by (uid=0) This is the first time it happened and since then I upgraded to the latest u