Educause Security Discussion mailing list archives
Re: i think i'm hacked - SOLVED
From: "Lentes, Bernd" <0000002c1fd0e2c2-dmarc-request () LISTSERV EDUCAUSE EDU>
Date: Thu, 17 Nov 2016 07:10:32 +0100
Hi, i think i found it out: When logging on as guest on the GUI, a user is created on-the-fly. And this one is called guest-"and-some-cryptical-character-sequence". That's the user i found in /etc/passwd. And when logging off this user is deleted. Someone must have logged on twice as guest, what my collegue normally does not, but i will ask him ... And the apparmor and rtkit stuff is always started when logging on as guest on the gui. So it seems to be normal. Maybe a bit overreacting of mine, but better to be a bit paranoid when dealing with computers. Thanks for any help. Bernd -- Bernd Lentes Systemadministration institute of developmental genetics Gebäude 35.34 - Raum 208 HelmholtzZentrum München bernd.lentes () helmholtz-muenchen de phone: +49 (0)89 3187 1241 fax: +49 (0)89 3187 2294 Erst wenn man sich auf etwas festlegt kann man Unrecht haben Scott Adams - Helmholtz Zentrum Muenchen Deutsches Forschungszentrum fuer Gesundheit und Umwelt (GmbH) Ingolstaedter Landstr. 1 85764 Neuherberg www.helmholtz-muenchen.de Aufsichtsratsvorsitzende: MinDir'in Baerbel Brumme-Bothe Geschaeftsfuehrer: Prof. Dr. Guenther Wess, Dr. Alfons Enhsen Registergericht: Amtsgericht Muenchen HRB 6466 USt-IdNr: DE 129521671
Current thread:
- i think i'm hacked - is this the right place to ask ? Lentes, Bernd (Nov 16)
- Re: i think i'm hacked - is this the right place to ask ? Adam Maynard (Nov 16)
- Re: i think i'm hacked - is this the right place to ask ? Lentes, Bernd (Nov 16)
- Re: i think i'm hacked - is this the right place to ask ? Valdis Kletnieks (Nov 16)
- Re: i think i'm hacked - is this the right place to ask ? Lentes, Bernd (Nov 16)
- Re: i think i'm hacked - is this the right place to ask ? Adam Maynard (Nov 16)
- Re: i think i'm hacked - is this the right place to ask ? Lentes, Bernd (Nov 16)
- Re: i think i'm hacked - SOLVED Lentes, Bernd (Nov 16)
- Re: i think i'm hacked - SOLVED Ken Connelly (Nov 17)
- DocuSign security concerns Penn, Blake (Nov 17)
- Re: DocuSign security concerns Campoe, Alex (Nov 17)
- Re: i think i'm hacked - is this the right place to ask ? Lentes, Bernd (Nov 16)
- Re: i think i'm hacked - is this the right place to ask ? Adam Maynard (Nov 16)