Re: i think i'm hacked - SOLVED

["Lentes, Bernd" <0000002c1fd0e2c2-dmarc-request () LISTSERV EDUCAUSE EDU>]

Hi,

i think i found it out:
When logging on as guest on the GUI, a user is created on-the-fly. And this one is called 
guest-"and-some-cryptical-character-sequence".
That's the user i found in /etc/passwd. And when logging off this user is deleted. Someone must have logged on twice as 
guest, what my collegue normally does not, but i will ask him ...
And the apparmor and rtkit stuff is always started when logging on as guest on the gui.
So it seems to be normal.

Maybe a bit overreacting of mine, but better to be a bit paranoid when dealing with computers.

Thanks for any help.


Bernd 

-- 
Bernd Lentes 

Systemadministration 
institute of developmental genetics 
Gebäude 35.34 - Raum 208 
HelmholtzZentrum München 
bernd.lentes () helmholtz-muenchen de 
phone: +49 (0)89 3187 1241 
fax: +49 (0)89 3187 2294 

Erst wenn man sich auf etwas festlegt kann man Unrecht haben 
Scott Adams

-


Helmholtz Zentrum Muenchen
Deutsches Forschungszentrum fuer Gesundheit und Umwelt (GmbH)
Ingolstaedter Landstr. 1
85764 Neuherberg
www.helmholtz-muenchen.de
Aufsichtsratsvorsitzende: MinDir'in Baerbel Brumme-Bothe
Geschaeftsfuehrer: Prof. Dr. Guenther Wess, Dr. Alfons Enhsen
Registergericht: Amtsgericht Muenchen HRB 6466
USt-IdNr: DE 129521671