Server hacked, sau utilizatori adaugati fara permisiune ?

[Jani Monoses]

2008/7/13 madalin <niladam at gmail.com>:

> Am facut upgrade la 8.04.1 si observ ca in lista de useri mi-au aparut 3
> utilizatori. 2 Dintre ei au /bin/false iar al 3lea are un /bin/sh.
>
> Mi se pare destul de ciudat. Un lsof |grep LISTEN nu mi-a listat nimic.
>
> Dau un copy/paste la utilizatorii respectivi, astept sugestii si pareri..
>
> libuuid:x:123:131::/var/lib/libuuid:/bin/sh
> pulse:x:124:132:PulseAudio daemon,,,:/var/run/pulse:/bin/false
> polkituser:x:125:137:PolicyKit,,,:/var/run/PolicyKit:/bin/false
>
>
Utilizatorii pentru PulseAudio si PolicyKit . Libuuid nu stiu ce e dar tot
creat de un pachet Ubuntu.

E in regula.

Jani
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.ubuntu.com/archives/ubuntu-ro/attachments/20080713/e1c6585f/attachment.htm