Strange guest users!!

[Florian Diesch]

Adnane <rabihadnane at gmail.com> writes:

> I recently found this on my /etc/passwd, and I don't know where they
> come from, malicius users ?
>
> **
>
>  *
>
>    guest-ju5MVt:x:114:126:Guest,,,:/tmp/guest-ju5MVt:/bin/bash
>    guest-wG6ljf:x:115:127:Guest,,,:/tmp/guest-wG6ljf:/bin/bash
>    guest-pnnpDM:x:116:128:Guest,,,:/tmp/guest-pnnpDM:/bin/bash
>    guest-vDcp9d:x:117:129:Guest,,,:/tmp/guest-vDcp9d:/bin/bash
>    guest-VBqZ2D:x:118:130:Guest,,,:/tmp/guest-VBqZ2D:/bin/bash
>    whoopsie:x:119:131::/nonexistent:/bin/false
>    guest-57TzoY:x:120:132:Guest,,,:/tmp/guest-57TzoY:/bin/bash
>    guest-5Wr1lz:x:121:134:Guest,,,:/tmp/guest-5Wr1lz:/bin/bash
>
> is there a way to prevent it if its bad ?


Those "guest-*" users are created when you open a guest session. They
are delete when log off from the guest session.

So either you have that many guest sessions open at the moment or
someone didn't properly log off from his/her guest sessions in the past.

Check which /tmp/guest-* folders do exist, only those guest sessions are
still active.


The user "whoopsie" is used by the Ubuntu crash database submission
daemon "whoopsie"




   Florian
-- 
Plugin for Nautilus to create and modify application starters:
Arronax <http://www.florian-diesch.de/software/arronax/>