N Nerigal Verified User Joined Jul 6, 2009 Messages 124 Feb 3, 2010 #1 after looking at logwatch i see this Commands Run: User *system*: personal crontab reloaded: 2 Time(s) what the hek is *system* user ? personally never saw this before... maybe this is a stupid question but i still wonder... thanks
after looking at logwatch i see this Commands Run: User *system*: personal crontab reloaded: 2 Time(s) what the hek is *system* user ? personally never saw this before... maybe this is a stupid question but i still wonder... thanks
nobaloney NoBaloney Internet Svcs - In Memoriam † Joined Jun 16, 2003 Messages 25,333 Location California Feb 6, 2010 #2 It's not a stupid question. Do you have a user named *system*? If not, then look for a server compromise. Jeff
It's not a stupid question. Do you have a user named *system*? If not, then look for a server compromise. Jeff
D daveyw Verified User Joined Jan 5, 2008 Messages 668 Location /dev/null Feb 7, 2010 #3 You can try the command below to get more information (as root on SSH) finger system Click to expand... If this doesn't work then do yum -y install finger. Its normal, since we have it too on our boxes, also on the 'new' installed boxes. ~# finger system Login: dbus Name: System message bus Directory: / Shell: /sbin/nologin Never logged in. No mail. No Plan. Click to expand... man dbus-daemon Click to expand...
You can try the command below to get more information (as root on SSH) finger system Click to expand... If this doesn't work then do yum -y install finger. Its normal, since we have it too on our boxes, also on the 'new' installed boxes. ~# finger system Login: dbus Name: System message bus Directory: / Shell: /sbin/nologin Never logged in. No mail. No Plan. Click to expand... man dbus-daemon Click to expand...
