Hallo, mir ist aufgefallen, dass bei mir letztens immer die hda angesprungen ist, obwohl ich sie sonst immer abgeschaltet wird (sie quietscht). ein "top" zeigte mir ein "find" von user nobody. wer ist dieser NOBODY? und wonach hat der gesucht? in der passwd hab ich dem erstmal die bash weggenommen (anstatt /bin/bash einfach /bin/false ....) sicher ist sicher..... Ganz unten hab ich nochmal die Ergebnisse von linux:/var/log # grep nobody -R * > /tmp/nobody.txt aufgeführt... oder hier (etwas übersichtlicher) http://nopaste.php-q.net/44877 In der Doku hab ich gelesen, dass dieser nobody automatisch erstellt wird, um irgendwelche programme, wie mldonkey zu starten. Stimmt das? (Ich weiß, es sieht aus, als würde ich hier die Doku anzweifeln....aber ich hab das ja nicht im handbuch oder so gelesen, sondern auf irgendeiner seite, deren url ich jetzt wieder verbummelt habe....) Könnte mich sonst jemand aufklären, was und wieso der da irgendwas gesucht hat? Der wollte wohl die ganze Platte durchsuchen..... Ich habe übrigens Suse 8.2 mit kernel 2.4.2, falls das wichtig ist..... Gruß Sören messages:Feb 3 12:01:02 linux su: (to nobody) root on none messages:Feb 3 12:01:02 linux su: pam_unix2: session started for user nobody, service su messages:Feb 3 12:07:11 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 4 14:16:38 linux su: (to nobody) root on none messages:Feb 4 14:16:38 linux su: pam_unix2: session started for user nobody, service su messages:Feb 5 14:30:58 linux su: (to nobody) root on none messages:Feb 5 14:30:58 linux su: pam_unix2: session started for user nobody, service su messages:Feb 5 14:36:15 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 6 14:46:41 linux su: (to nobody) root on none messages:Feb 6 14:46:41 linux su: pam_unix2: session started for user nobody, service su messages:Feb 6 14:54:51 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 7 15:00:56 linux su: (to nobody) root on none messages:Feb 7 15:00:56 linux su: pam_unix2: session started for user nobody, service su messages:Feb 7 15:06:40 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 8 16:31:12 linux su: (to nobody) root on none messages:Feb 8 16:31:12 linux su: pam_unix2: session started for user nobody, service su messages:Feb 8 16:38:23 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 9 16:46:26 linux su: (to nobody) root on none messages:Feb 9 16:46:26 linux su: pam_unix2: session started for user nobody, service su messages:Feb 9 16:53:15 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 10 00:15:59 linux su: (to nobody) root on none messages:Feb 10 00:15:59 linux su: pam_unix2: session started for user nobody, service su messages:Feb 10 00:21:48 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 11 17:01:00 linux su: (to nobody) root on none messages:Feb 11 17:01:00 linux su: pam_unix2: session started for user nobody, service su messages:Feb 12 21:01:14 linux su: (to nobody) root on none messages:Feb 12 21:01:14 linux su: pam_unix2: session started for user nobody, service su messages:Feb 12 21:07:40 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 14 11:30:56 linux su: (to nobody) root on none messages:Feb 14 11:30:56 linux su: pam_unix2: session started for user nobody, service su messages:Feb 14 11:36:46 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 15 11:46:16 linux su: (to nobody) root on none messages:Feb 15 11:46:16 linux su: pam_unix2: session started for user nobody, service su messages:Feb 15 11:59:15 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 16 18:19:03 linux su: (to nobody) root on none messages:Feb 16 18:19:03 linux su: pam_unix2: session started for user nobody, service su messages:Feb 16 18:30:18 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 17 18:31:10 linux su: (to nobody) root on none messages:Feb 17 18:31:10 linux su: pam_unix2: session started for user nobody, service su messages:Feb 17 18:37:01 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 18 22:31:12 linux su: (to nobody) root on none messages:Feb 18 22:31:12 linux su: pam_unix2: session started for user nobody, service su messages:Feb 18 22:36:55 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 19 22:46:00 linux su: (to nobody) root on none messages:Feb 19 22:46:00 linux su: pam_unix2: session started for user nobody, service su messages:Feb 21 12:45:57 linux su: (to nobody) root on none messages:Feb 21 12:45:57 linux su: pam_unix2: session started for user nobody, service su messages:Feb 21 12:51:41 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 22 18:46:02 linux su: (to nobody) root on none messages:Feb 22 18:46:02 linux su: pam_unix2: session started for user nobody, service su messages:Feb 22 18:51:49 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 24 14:16:12 linux su: (to nobody) root on none messages:Feb 24 14:16:12 linux su: pam_unix2: session started for user nobody, service su messages:Feb 25 15:15:57 linux su: (to nobody) root on none messages:Feb 25 15:15:57 linux su: pam_unix2: session started for user nobody, service su messages:Feb 25 15:21:45 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 26 15:16:56 linux su: (to nobody) root on none messages:Feb 26 15:16:57 linux su: pam_unix2: session started for user nobody, service su messages:Feb 26 15:32:13 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 27 15:31:15 linux su: (to nobody) root on none messages:Feb 27 15:31:15 linux su: pam_unix2: session started for user nobody, service su messages:Feb 27 15:38:00 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 28 00:16:31 linux su: (to nobody) root on none messages:Feb 28 00:16:31 linux su: pam_unix2: session started for user nobody, service su messages:Feb 28 00:25:19 linux su: pam_unix2: session finished for user nobody, service su messages:Feb 29 21:00:53 linux su: (to nobody) root on none messages:Feb 29 21:00:53 linux su: pam_unix2: session started for user nobody, service su messages:Feb 29 21:06:08 linux su: pam_unix2: session finished for user nobody, service su messages:Mar 2 20:31:25 linux su: (to nobody) root on none messages:Mar 2 20:31:25 linux su: pam_unix2: session started for user nobody, service su messages:Mar 2 20:40:09 linux su: pam_unix2: session finished for user nobody, service su messages:Mar 3 20:31:59 linux su: (to nobody) root on none messages:Mar 3 20:31:59 linux su: pam_unix2: session started for user nobody, service su messages:Mar 3 20:39:50 linux su: pam_unix2: session finished for user nobody, service su messages:Mar 4 21:11:49 linux su: (to nobody) root on none messages:Mar 4 21:11:49 linux su: pam_unix2: session started for user nobody, service su messages:Mar 5 21:16:06 linux su: (to nobody) root on none messages:Mar 5 21:16:07 linux su: pam_unix2: session started for user nobody, service su messages:Mar 5 21:21:23 linux su: pam_unix2: session finished for user nobody, service su messages:Mar 6 00:16:21 linux su: (to nobody) root on none messages:Mar 6 00:16:21 linux su: pam_unix2: session started for user nobody, service su messages:Mar 6 00:24:08 linux su: pam_unix2: session finished for user nobody, service su nessusd.messages:[Tue Dec 23 10:21:43 2003][2279] user soeren : launching httpd_nobody.nasl against linux.local [3466] nessusd.messages:[Tue Dec 23 10:21:43 2003][2279] httpd_nobody.nasl (process 3466) finished its job in 0.226 seconds nessusd.messages:[Tue Dec 23 10:49:15 2003][4766] user soeren : Not launching httpd_nobody.nasl against 192.168.0.3 none of the required ports are open (this is not an error)