Re: Strange 'su' error messages

[Barak Korren]

Ian Brayshaw wrote:

On Tuesday 13 January 2004 9:29 am, Christian Schuerer wrote:
 

Since updating my debian server yesterday I get the following error
messages every hour (generated by logcheck):
 Jan 13 06:25:01 asterix su[5741]: + ??? root:nobody
   

I now get similar messages in my logs after a recent  upgrade of AIDE.

.ib

 

I got those too:

Jan 15 06:25:03 ifireball su[21163]: + ??? root:nobody

However, I do not have AIDE installed, and greping for "su" in 
/etc/cron/daily produced
nothing meaningful.
also, chkrootkit reports process hidden from ps,  but /proc/*/status 
reports them to be
ksoftirq_CPU0, kswapd, bdflush and kupdated which seems to be legit (no 
doubles)

Am I missing something here?

ifb.

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]