was sind das für logs: auth.log - su[3617]: + ??? root:nobody

[tomotom]

Woher kommen diese Einträge ??? root:nobody?
warum ist da pam aktiv?
crontab hat den Eintag:

Code: Select all

25 6    * * *   root    test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily

Code: Select all

Oct 30 06:25:01 ser30 CRON[3597]: (pam_unix) session opened for user root by (uid=0)
Oct 30 06:25:01 ser30 su[3617]: + ??? root:nobody
Oct 30 06:25:01 ser30 su[3617]: (pam_unix) session opened for user nobody by (uid=0)
Oct 30 06:25:01 ser30 CRON[3597]: (pam_unix) session closed for user root
...
Oct 31 06:25:01 ser30 CRON[27607]: (pam_unix) session opened for user root by (uid=0)
Oct 31 06:25:01 ser30 su[27627]: + ??? root:nobody
Oct 31 06:25:01 ser30 su[27627]: (pam_unix) session opened for user nobody by (uid=0)
...
Nov  1 06:25:01 ser30 CRON[28078]: (pam_unix) session opened for user root by (uid=0)
Nov  1 06:25:01 ser30 su[28098]: + ??? root:nobody
Nov  1 06:25:01 ser30 su[28098]: (pam_unix) session opened for user nobody by (uid=0)
Nov  1 06:25:01 ser30 CRON[28078]: (pam_unix) session closed for user root
Nov  1 06:52:01 ser30 CRON[28175]: (pam_unix) session opened for user root by (uid=0)

[der kleine tux]

schau dir mal
/etc/cron.daily/find genauer an

gruss

[tomotom]

schau dir mal
/etc/cron.daily/find genauer an

gruss

aha, danke