Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Solaris10 SU log generate

Status
Not open for further replies.

selsan

Technical User
Jan 8, 2009
1
SG
Hi,

In my solaris10 server repeatedly i am getting this logs in my /var/adm/messages,
'su xxxxx' succeeded for root on /dev/???. Please let me know is it anything due to any bugs.
 
Does root su to other userids on your box?

I want to be good, is that not enough?
 
My guess would be a call to "su" in a script in the crontab. The other would be an "su" call in a remote script that is accessing your box.

The reason is that there is no associated tty, so it has to be something that doesn't login.
 
do you have your telnet port open? which version of Solaris 10 are you using?

if you look in /var/spool/cron at all the crontabs are there any suspicious lines in any of them?
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top