![](https://seccdn.libravatar.org/avatar/5a94d2f8a5845d5f1c1ea1556fc0cb72.jpg?s=120&d=mm&r=g)
23 Nov
2004
23 Nov
'04
12:45
John Ryan wrote:
so I ran "top" and saw that user "nobody" was running a "find". I killed it immediately.
No need to do that.
Who is this user?
A very unprivileged user in a Linux system to do certain tasks that don't need very many privileges.
Is this normal, or do I have an intruder?
This is normal. It is updating a database to be used by the locate command.
If so, how should I proceed?
Next time let it finish. You can turn it off via Yast>System
etc/sysconfig editor>Applications>Locate>RUN_UPDATEDB and set it to no, but only if you never use the locate command. If you use it, leave it on. HTH.
-- Joe Morris New Tribes Mission Email Address: Joe_Morris@ntm.org Registered Linux user 231871