Curious Log File Entry
Ben Beeson
beesond001 at hawaii.rr.com
Wed Mar 28 01:41:30 PST 2001
Aloha all,
Does anyone have any clue how the below entry could end up in my log
files? I am pretty sure no one here tried to log in as user "news" at 4
a.m...... This is curious because I've never seen this one before. Should I
block news (port 119) in my firewall????
grep news /var/log/messages
Mar 25 04:03:42 [My IP Address Here ] PAM_pwdb[1442]: (su) session opened for
user news by (uid=0)
Mar 25 04:03:42 [My IP Address Here ] pam_xauth[1442]:
do_file: could not create dir /var/spool/news/.xauth
Mar 25 04:03:42 [My IP Address Here ]
PAM_pwdb[1442]: (su) session closed for user news
Mar 25 4:03:42 [My IP Address Here ] pam_xauth[1442]: do_file: could not
create dir /var/spool/news/.xauth
Mar 27 04:02:17 localhost PAM_pwdb[6857]:
(su) session opened for user news by (uid=0) Mar 27 04:02:17 localhost
PAM_pwdb[6857]: (su) session closed for user news
Thanks,
Ben
More information about the LUAU
mailing list