De la visite sur /var/log/auth.log

il semble que qq’un s’invite sur ma machine
par ex le 16 avirl à 12 heure 39 et 44 secondes
voici le fichier log (avec policykit pour obtenir des privilièges de
super utilisateur)

[code]

Apr 15 09:20:01 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 09:20:01 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 09:38:35 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 09:38:35 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 09:49:24 debian su[6698]: Successful su for root by eddy
Apr 15 09:49:24 debian su[6698]: + /dev/pts/0 eddy:root
Apr 15 09:49:24 debian su[6698]: pam_unix(su:session): session opened for user root by eddy(uid=1000)
Apr 15 09:50:35 debian su[6698]: pam_unix(su:session): session closed for user root
Apr 15 09:57:51 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 09:57:51 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 10:17:01 debian CRON[7321]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 10:17:01 debian CRON[7321]: pam_unix(cron:session): session closed for user root
Apr 15 10:49:52 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 10:49:52 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 11:17:01 debian CRON[7920]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 11:17:01 debian CRON[7920]: pam_unix(cron:session): session closed for user root
Apr 15 12:12:51 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 12:12:51 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 12:17:01 debian CRON[7982]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 12:17:01 debian CRON[7982]: pam_unix(cron:session): session closed for user root
Apr 15 12:33:04 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 12:33:04 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 13:00:26 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 13:00:26 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 13:17:01 debian CRON[8190]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 13:17:01 debian CRON[8190]: pam_unix(cron:session): session closed for user root
Apr 15 13:27:09 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 13:27:09 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 13:42:07 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 13:42:07 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 14:15:01 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 14:15:01 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 14:17:01 debian CRON[8602]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 14:17:01 debian CRON[8602]: pam_unix(cron:session): session closed for user root
Apr 15 14:28:38 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 14:28:38 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 15:03:35 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 15:03:35 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 15:17:01 debian CRON[8828]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 15:17:01 debian CRON[8828]: pam_unix(cron:session): session closed for user root
Apr 15 16:17:01 debian CRON[8840]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 16:17:01 debian CRON[8840]: pam_unix(cron:session): session closed for user root
Apr 15 17:00:23 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 17:00:23 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 17:17:01 debian CRON[8989]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 17:17:01 debian CRON[8989]: pam_unix(cron:session): session closed for user root
Apr 15 17:44:54 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 17:44:54 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 18:07:45 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 18:07:45 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 18:17:01 debian CRON[9146]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 18:17:01 debian CRON[9146]: pam_unix(cron:session): session closed for user root
Apr 15 18:24:42 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 18:24:42 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 18:30:33 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 18:30:33 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 18:45:08 debian gnome-keyring-daemon[2597]: couldn’t initialize slot with master password: Le mot de passe ou le code PIN n’est pas correct
Apr 15 18:45:08 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 19:03:17 debian su[9448]: Successful su for root by eddy
Apr 15 19:03:17 debian su[9448]: + /dev/pts/0 eddy:root
Apr 15 19:03:17 debian su[9448]: pam_unix(su:session): session opened for user root by (uid=1000)
Apr 15 19:04:12 debian su[9448]: pam_unix(su:session): session closed for user root
Apr 15 19:07:31 debian gdm-session-worker[2536]: pam_unix(gdm3:session): session closed for user eddy
Apr 15 19:07:31 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.30, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 15 19:07:31 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.18, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 15 19:07:31 debian seahorse-agent[2665]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 15 19:07:31 debian seahorse-agent[2665]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 15 19:07:36 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session12 (system bus name :1.102 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 15 19:11:57 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 15 19:12:18 debian gdm-session-worker[2201]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 15 19:12:18 debian gdm-session-worker[2201]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 15 19:12:24 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.36 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 15 19:17:01 debian CRON[2434]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 19:17:01 debian CRON[2434]: pam_unix(cron:session): session closed for user root
Apr 15 19:44:10 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 20:16:43 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 20:17:01 debian CRON[3214]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 20:17:01 debian CRON[3214]: pam_unix(cron:session): session closed for user root
Apr 15 20:50:13 debian gnome-screensaver-dialog: gkr-pam: unlocked login keyring
Apr 15 20:58:04 debian gdm-session-worker[2201]: pam_unix(gdm3:session): session closed for user eddy
Apr 15 20:58:04 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 15 20:58:04 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.36, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 15 20:58:04 debian seahorse-agent[2329]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 15 20:58:04 debian seahorse-agent[2329]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 15 21:09:51 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 15 21:11:58 debian gdm-session-worker[2231]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 15 21:11:58 debian gdm-session-worker[2231]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 15 21:12:03 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.36 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 15 21:17:01 debian CRON[2524]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 15 21:17:01 debian CRON[2524]: pam_unix(cron:session): session closed for user root
Apr 15 21:17:51 debian su[2543]: Successful su for root by eddy
Apr 15 21:17:51 debian su[2543]: + /dev/pts/2 eddy:root
Apr 15 21:17:51 debian su[2543]: pam_unix(su:session): session opened for user root by eddy(uid=1000)
Apr 15 21:19:03 debian su[2543]: pam_unix(su:session): session closed for user root
Apr 15 21:25:42 debian gdm-session-worker[2231]: pam_unix(gdm3:session): session closed for user eddy
Apr 15 21:25:42 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 15 21:25:42 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.36, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 15 21:25:42 debian seahorse-agent[2344]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 15 21:25:42 debian seahorse-agent[2344]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 15 21:25:44 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session4 (system bus name :1.58 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 15 23:19:37 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 15 23:19:53 debian gdm-session-worker[2213]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 15 23:19:53 debian gdm-session-worker[2213]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 15 23:20:00 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.36 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 15 23:33:00 debian gdm-session-worker[2213]: pam_unix(gdm3:session): session closed for user eddy
Apr 15 23:33:00 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.36, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 15 23:33:00 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 15 23:33:00 debian seahorse-agent[2341]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 15 23:33:00 debian seahorse-agent[2341]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 15 23:33:02 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session3 (system bus name :1.57 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 16 00:14:31 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 16 00:14:37 debian gdm-session-worker[2196]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 16 00:14:37 debian gdm-session-worker[2196]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 16 00:14:44 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.37 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 16 00:15:59 debian polkitd(authority=local): Operator of unix-session:/org/freedesktop/ConsoleKit/Session2 FAILED to authenticate to gain authorization for action org.freedesktop.systemtoolsbackends.set for system-bus-name::1.50 [users-admin] (owned by unix-user:eddy)
Apr 16 00:16:36 debian polkitd(authority=local): Operator of unix-session:/org/freedesktop/ConsoleKit/Session2 successfully authenticated as unix-user:root to gain TEMPORARY authorization for action org.freedesktop.systemtoolsbackends.set for system-bus-name::1.50 [users-admin] (owned by unix-user:eddy)
Apr 16 00:17:01 debian CRON[2586]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 00:17:01 debian CRON[2586]: pam_unix(cron:session): session closed for user root
Apr 16 00:17:36 debian chpasswd[2650]: pam_unix(chpasswd:chauthtok): new password not acceptable
Apr 16 00:21:30 debian gdm-session-worker[2196]: pam_unix(gdm3:session): session closed for user eddy
Apr 16 00:21:31 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 16 00:21:31 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.37, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 16 00:21:31 debian seahorse-agent[2321]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 00:21:31 debian seahorse-agent[2321]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 00:21:33 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session3 (system bus name :1.70 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 16 06:55:11 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 16 06:55:32 debian gdm-session-worker[2242]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 16 06:55:32 debian gdm-session-worker[2242]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 16 06:55:37 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.37 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 16 07:09:53 debian sudo: eddy : user NOT in sudoers ; TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/bin/su
Apr 16 07:10:18 debian su[2775]: Successful su for root by eddy
Apr 16 07:10:18 debian su[2775]: + /dev/pts/0 eddy:root
Apr 16 07:10:18 debian su[2775]: pam_unix(su:session): session opened for user root by eddy(uid=1000)
Apr 16 07:10:23 debian sudo: root : TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/bin/su
Apr 16 07:10:23 debian su[2785]: Successful su for root by root
Apr 16 07:10:23 debian su[2785]: + /dev/pts/0 root:root
Apr 16 07:10:23 debian su[2785]: pam_unix(su:session): session opened for user root by eddy(uid=0)
Apr 16 07:11:05 debian passwd[2794]: pam_unix(passwd:chauthtok): password changed for root
Apr 16 07:11:05 debian passwd[2794]: gkr-pam: couldn’t update the login keyring password: no old password was entered
Apr 16 07:11:21 debian su[2785]: pam_unix(su:session): session closed for user root
Apr 16 07:11:21 debian su[2775]: pam_unix(su:session): session closed for user root
Apr 16 07:12:12 debian passwd[2944]: pam_unix(passwd:chauthtok): password changed for eddy
Apr 16 07:12:12 debian gnome-keyring-daemon[2948]: gp11_module_get_slots: assertion data->funcs' failed Apr 16 07:12:12 debian gnome-keyring-daemon[2948]: lookup_login_session: assertionslot’ failed
Apr 16 07:12:12 debian gnome-keyring-daemon[2948]: lookup_login_keyring: assertion GP11_IS_SESSION (session)' failed Apr 16 07:12:12 debian gnome-keyring-daemon[2948]: create_credential: assertionGP11_IS_SESSION (session)’ failed
Apr 16 07:12:12 debian gnome-keyring-daemon[2948]: egg_error_message: assertion error' failed Apr 16 07:12:12 debian gnome-keyring-daemon[2948]: couldn't create new login credential: (unknown) Apr 16 07:12:12 debian passwd[2944]: gkr-pam: couldn't change password for the login keyring: the passwords didn't match. Apr 16 07:12:34 debian gdm-session-worker[2242]: pam_unix(gdm3:session): session closed for user eddy Apr 16 07:12:34 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus) Apr 16 07:12:34 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.37, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus) Apr 16 07:12:34 debian seahorse-agent[2354]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d'informations. (Détails : 1: Impossible d'envoyer un message au démon GConf : Connection is closed) Apr 16 07:12:34 debian seahorse-agent[2354]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d'informations. (Détails : 1: Impossible d'envoyer un message au démon GConf : Connection is closed) Apr 16 07:12:36 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session5 (system bus name :1.64 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) Apr 16 07:13:47 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) Apr 16 07:14:12 debian gdm-session-worker[2150]: pam_unix(gdm3:session): session opened for user eddy by (uid=0) Apr 16 07:14:12 debian gdm-session-worker[2150]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0 Apr 16 07:14:15 debian gnome-keyring-daemon[2211]: Failed to unlock login on startup Apr 16 07:14:17 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.36 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) Apr 16 07:16:57 debian su[2522]: Successful su for root by eddy Apr 16 07:16:57 debian su[2522]: + /dev/pts/0 eddy:root Apr 16 07:16:57 debian su[2522]: pam_unix(su:session): session opened for user root by eddy(uid=1000) Apr 16 07:17:01 debian CRON[2532]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 16 07:17:01 debian CRON[2532]: pam_unix(cron:session): session closed for user root Apr 16 07:17:15 debian sudo: root : TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/usr/bin/gedit /var/log/auth.log Apr 16 07:21:10 debian su[2522]: pam_unix(su:session): session closed for user root Apr 16 07:26:08 debian su[2573]: pam_unix(su:auth): authentication failure; logname=eddy uid=1000 euid=0 tty=/dev/pts/0 ruser=eddy rhost= user=root Apr 16 07:26:10 debian su[2573]: pam_authenticate: Authentication failure Apr 16 07:26:10 debian su[2573]: FAILED su for root by eddy Apr 16 07:26:10 debian su[2573]: - /dev/pts/0 eddy:root Apr 16 07:26:20 debian su[2575]: Successful su for root by eddy Apr 16 07:26:20 debian su[2575]: + /dev/pts/0 eddy:root Apr 16 07:26:20 debian su[2575]: pam_unix(su:session): session opened for user root by eddy(uid=1000) Apr 16 07:26:36 debian sudo: root : TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/usr/bin/gedit /etc/host.deny Apr 16 07:26:54 debian su[2575]: pam_unix(su:session): session closed for user root Apr 16 07:27:15 debian su[2613]: Successful su for root by eddy Apr 16 07:27:15 debian su[2613]: + /dev/pts/0 eddy:root Apr 16 07:27:15 debian su[2613]: pam_unix(su:session): session opened for user root by eddy(uid=1000) Apr 16 07:27:28 debian sudo: root : TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/usr/bin/gedit /etc/hosts.deny Apr 16 07:29:45 debian su[2613]: pam_unix(su:session): session closed for user root Apr 16 07:29:56 debian gdm-session-worker[2150]: pam_unix(gdm3:session): session closed for user eddy Apr 16 07:29:56 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.36, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus) Apr 16 07:29:56 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus) Apr 16 07:29:56 debian seahorse-agent[2278]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d'informations. (Détails : 1: Impossible d'envoyer un message au démon GConf : Connection is closed) Apr 16 07:29:56 debian seahorse-agent[2278]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d'informations. (Détails : 1: Impossible d'envoyer un message au démon GConf : Connection is closed) Apr 16 07:29:58 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session6 (system bus name :1.61 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) Apr 16 07:30:01 debian CRON[2716]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 16 07:30:01 debian CRON[2716]: pam_unix(cron:session): session closed for user root Apr 16 07:30:08 debian gdm-session-worker[2709]: pam_unix(gdm3:session): session opened for user eddy by (uid=0) Apr 16 07:30:08 debian gdm-session-worker[2709]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0 Apr 16 07:30:08 debian gnome-keyring-daemon[2741]: Failed to unlock login on startup Apr 16 07:30:10 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session7 (system bus name :1.69 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) Apr 16 07:36:51 debian su[3014]: Successful su for root by eddy Apr 16 07:36:51 debian su[3014]: + /dev/pts/0 eddy:root Apr 16 07:36:51 debian su[3014]: pam_unix(su:session): session opened for user root by (uid=1000) Apr 16 07:38:06 debian su[3014]: pam_unix(su:session): session closed for user root Apr 16 08:15:30 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid. Apr 16 08:16:10 debian gnome-keyring-daemon[2741]: GLib-GObject: g_object_unref: assertionG_IS_OBJECT (object)’ failed
Apr 16 08:17:01 debian CRON[3216]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 08:17:01 debian CRON[3216]: pam_unix(cron:session): session closed for user root
Apr 16 08:27:43 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 09:05:01 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 09:17:01 debian CRON[3668]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 09:17:01 debian CRON[3668]: pam_unix(cron:session): session closed for user root
Apr 16 09:17:57 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 09:18:09 debian su[3694]: Successful su for root by eddy
Apr 16 09:18:09 debian su[3694]: + /dev/pts/0 eddy:root
Apr 16 09:18:09 debian su[3694]: pam_unix(su:session): session opened for user root by eddy(uid=1000)
Apr 16 09:18:20 debian sudo: root : TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/usr/bin/gedit /var/hosts.deny
Apr 16 09:19:26 debian sudo: root : TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/usr/bin/gedit /etc/hosts.deny
Apr 16 09:19:48 debian su[3694]: pam_unix(su:session): session closed for user root
Apr 16 09:19:53 debian gdm-session-worker[2709]: pam_unix(gdm3:session): session closed for user eddy
Apr 16 09:19:53 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session6 (system bus name :1.61, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 16 09:19:53 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session7 (system bus name :1.69, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 16 09:19:53 debian seahorse-agent[2807]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 09:19:53 debian seahorse-agent[2807]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 09:19:54 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session10 (system bus name :1.95 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 16 09:20:02 debian gdm-session-worker[3881]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 16 09:20:02 debian gdm-session-worker[3881]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 16 09:20:02 debian gnome-keyring-daemon[3891]: Failed to unlock login on startup
Apr 16 09:20:04 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session11 (system bus name :1.103 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 16 09:20:23 debian su[4072]: Successful su for root by eddy
Apr 16 09:20:23 debian su[4072]: + /dev/pts/0 eddy:root
Apr 16 09:20:23 debian su[4072]: pam_unix(su:session): session opened for user root by eddy(uid=1000)
Apr 16 09:20:31 debian sudo: root : TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/usr/bin/gedit /etc/hosts.deny
Apr 16 09:20:55 debian su[4072]: pam_unix(su:session): session closed for user root
Apr 16 09:20:59 debian gdm-session-worker[3881]: pam_unix(gdm3:session): session closed for user eddy
Apr 16 09:20:59 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session10 (system bus name :1.95, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 16 09:20:59 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session11 (system bus name :1.103, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 16 09:21:00 debian seahorse-agent[3957]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 09:21:00 debian seahorse-agent[3957]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 09:21:01 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session13 (system bus name :1.123 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 16 09:21:10 debian gdm-session-worker[4168]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 16 09:21:10 debian gdm-session-worker[4168]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 16 09:21:11 debian gnome-keyring-daemon[4178]: Failed to unlock login on startup
Apr 16 09:21:12 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session14 (system bus name :1.131 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 16 09:45:11 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 09:46:42 debian su[4525]: Successful su for root by eddy
Apr 16 09:46:42 debian su[4525]: + /dev/pts/0 eddy:root
Apr 16 09:46:42 debian su[4525]: pam_unix(su:session): session opened for user root by eddy(uid=1000)
Apr 16 09:47:07 debian sudo: root : TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/usr/bin/gedit /etc/hosts.allow
Apr 16 09:47:40 debian sudo: root : TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/usr/bin/gedit /etc/hosts.deny
Apr 16 09:47:51 debian su[4525]: pam_unix(su:session): session closed for user root
Apr 16 09:53:25 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 10:17:01 debian CRON[4652]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 10:17:01 debian CRON[4652]: pam_unix(cron:session): session closed for user root
Apr 16 11:17:01 debian CRON[4664]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 11:17:01 debian CRON[4664]: pam_unix(cron:session): session closed for user root
Apr 16 11:57:04 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 12:17:01 debian CRON[4704]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 12:17:01 debian CRON[4704]: pam_unix(cron:session): session closed for user root
Apr 16 12:38:45 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 12:38:56 debian su[4734]: Successful su for root by eddy
Apr 16 12:38:56 debian su[4734]: + /dev/pts/0 eddy:root
Apr 16 12:38:56 debian su[4734]: pam_unix(su:session): session opened for user root by eddy(uid=1000)
Apr 16 12:39:07 debian sudo: root : TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/usr/bin/gedit /etc/hosts.deny
Apr 16 12:39:28 debian su[4734]: pam_unix(su:session): session closed for user root
Apr 16 12:39:34 debian gdm-session-worker[4168]: pam_unix(gdm3:session): session closed for user eddy
Apr 16 12:39:34 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session13 (system bus name :1.123, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 16 12:39:34 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session14 (system bus name :1.131, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 16 12:39:34 debian seahorse-agent[4244]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 12:39:34 debian seahorse-agent[4244]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 12:39:35 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session17 (system bus name :1.156 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 16 12:39:44 debian gdm-session-worker[4828]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 16 12:39:44 debian gdm-session-worker[4828]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 16 12:39:44 debian gnome-keyring-daemon[4838]: Failed to unlock login on startup
Apr 16 12:39:46 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session18 (system bus name :1.165 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 16 12:45:45 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 13:17:01 debian CRON[5274]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 13:17:01 debian CRON[5274]: pam_unix(cron:session): session closed for user root
Apr 16 13:17:03 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 14:17:01 debian CRON[5413]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 14:17:01 debian CRON[5413]: pam_unix(cron:session): session closed for user root
Apr 16 14:46:50 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 15:17:01 debian CRON[5487]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 15:17:01 debian CRON[5487]: pam_unix(cron:session): session closed for user root
Apr 16 15:37:34 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 16:17:01 debian CRON[5625]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 16:17:01 debian CRON[5625]: pam_unix(cron:session): session closed for user root
Apr 16 17:17:01 debian CRON[5635]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 17:17:01 debian CRON[5635]: pam_unix(cron:session): session closed for user root
Apr 16 17:27:39 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 17:52:48 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 17:54:00 debian su[5854]: Successful su for root by eddy
Apr 16 17:54:00 debian su[5854]: + /dev/pts/0 eddy:root
Apr 16 17:54:00 debian su[5854]: pam_unix(su:session): session opened for user root by (uid=1000)
Apr 16 17:54:11 debian su[5854]: pam_unix(su:session): session closed for user root
Apr 16 17:58:57 debian su[5988]: Successful su for root by eddy
Apr 16 17:58:57 debian su[5988]: + /dev/pts/0 eddy:root
Apr 16 17:58:57 debian su[5988]: pam_unix(su:session): session opened for user root by (uid=1000)
Apr 16 18:00:18 debian groupadd[6543]: group added to /etc/group: name=pulse, GID=119
Apr 16 18:00:18 debian groupadd[6543]: group added to /etc/gshadow: name=pulse
Apr 16 18:00:18 debian groupadd[6543]: new group: name=pulse, GID=119
Apr 16 18:00:18 debian useradd[6547]: new user: name=pulse, UID=110, GID=119, home=/var/run/pulse, shell=/bin/false
Apr 16 18:00:18 debian usermod[6552]: change user ‘pulse’ password
Apr 16 18:00:18 debian chage[6557]: changed password expiry for pulse
Apr 16 18:00:18 debian chfn[6560]: changed user ‘pulse’ information
Apr 16 18:00:18 debian gpasswd[6565]: user pulse added by root to group audio
Apr 16 18:00:18 debian groupadd[6571]: group added to /etc/group: name=pulse-access, GID=120
Apr 16 18:00:18 debian groupadd[6571]: group added to /etc/gshadow: name=pulse-access
Apr 16 18:00:18 debian groupadd[6571]: new group: name=pulse-access, GID=120
Apr 16 18:01:26 debian su[5988]: pam_unix(su:session): session closed for user root
Apr 16 18:17:01 debian CRON[8137]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 18:17:01 debian CRON[8137]: pam_unix(cron:session): session closed for user root
Apr 16 18:41:11 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 18:46:09 debian gdm-session-worker[4828]: pam_unix(gdm3:session): session closed for user eddy
Apr 16 18:46:09 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session17 (system bus name :1.156, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 16 18:46:09 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session18 (system bus name :1.165, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 16 18:46:11 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session21 (system bus name :1.203 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 16 18:46:22 debian gdm-session-worker[8301]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 16 18:46:22 debian gdm-session-worker[8301]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 16 18:46:22 debian gnome-keyring-daemon[8310]: Failed to unlock login on startup
Apr 16 18:46:24 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session22 (system bus name :1.212 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 16 19:06:43 debian su[9419]: Successful su for root by eddy
Apr 16 19:06:43 debian su[9419]: + /dev/pts/0 eddy:root
Apr 16 19:06:43 debian su[9419]: pam_unix(su:session): session opened for user root by (uid=1000)
Apr 16 19:07:02 debian su[9419]: pam_unix(su:session): session closed for user root
Apr 16 19:08:17 debian su[9503]: Successful su for root by eddy
Apr 16 19:08:17 debian su[9503]: + /dev/pts/0 eddy:root
Apr 16 19:08:17 debian su[9503]: pam_unix(su:session): session opened for user root by (uid=1000)
Apr 16 19:09:16 debian su[9503]: pam_unix(su:session): session closed for user root
Apr 16 19:17:01 debian CRON[9982]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 19:17:01 debian CRON[9982]: pam_unix(cron:session): session closed for user root
Apr 16 19:32:53 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 19:48:47 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 20:17:01 debian CRON[10187]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 16 20:17:01 debian CRON[10187]: pam_unix(cron:session): session closed for user root
Apr 16 20:28:04 debian gnome-screensaver-dialog: gkr-pam: the password for the login keyring was invalid.
Apr 16 21:08:37 debian gdm-session-worker[8301]: pam_unix(gdm3:session): session closed for user eddy
Apr 16 21:08:37 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session22 (system bus name :1.212, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 16 21:08:38 debian seahorse-agent[8376]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 21:08:38 debian seahorse-agent[8376]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 21:08:38 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session21 (system bus name :1.203, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 16 21:12:43 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 16 21:14:20 debian gdm-session-worker[2251]: pam_unix(gdm3:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=eddy
Apr 16 21:14:32 debian gdm-session-worker[2312]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 16 21:14:32 debian gdm-session-worker[2312]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 16 21:14:35 debian gnome-keyring-daemon[2319]: Failed to unlock login on startup
Apr 16 21:14:37 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.37 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 16 21:15:47 debian gdm-session-worker[2312]: pam_unix(gdm3:session): session closed for user eddy
Apr 16 21:15:47 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.22, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 16 21:15:47 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.37, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 16 21:15:47 debian seahorse-agent[2385]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 21:15:47 debian seahorse-agent[2385]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 16 21:15:49 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session3 (system bus name :1.60 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 17 04:11:51 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.23 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 17 04:12:24 debian gdm-session-worker[2205]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 17 04:12:24 debian gdm-session-worker[2205]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 17 04:12:27 debian gnome-keyring-daemon[2263]: Failed to unlock login on startup
Apr 17 04:12:30 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.37 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 17 04:17:01 debian CRON[2547]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 17 04:17:01 debian CRON[2547]: pam_unix(cron:session): session closed for user root
Apr 17 04:19:13 debian gdm-session-worker[2205]: pam_unix(gdm3:session): session closed for user eddy
Apr 17 04:19:13 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.37, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 17 04:19:13 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.23, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 17 04:19:13 debian seahorse-agent[2330]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 17 04:19:13 debian seahorse-agent[2330]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 17 04:19:15 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session3 (system bus name :1.59 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 17 05:29:00 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.23 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 17 05:29:11 debian gdm-session-worker[2181]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 17 05:29:11 debian gdm-session-worker[2181]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 17 05:29:14 debian gnome-keyring-daemon[2242]: Failed to unlock login on startup
Apr 17 05:29:18 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.37 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 17 06:00:28 debian gdm-session-worker[2181]: pam_unix(gdm3:session): session closed for user eddy
Apr 17 06:00:28 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.23, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8) (disconnected from bus)
Apr 17 06:00:28 debian polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.37, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8) (disconnected from bus)
Apr 17 06:00:28 debian seahorse-agent[2309]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 17 06:00:28 debian seahorse-agent[2309]: GConf error:#012 Échec lors de la connexion au serveur de configuration. Cela est généralement dû à un défaut (absence ou mauvaise configuration) du démon de bus de session D-Bus. Veuillez consulter http://projects.gnome.org/gconf/ pour plus d’informations. (Détails : 1: Impossible d’envoyer un message au démon GConf : Connection is closed)
Apr 17 06:00:30 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session3 (system bus name :1.61 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 17 07:55:57 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session1 (system bus name :1.23 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.UTF-8)
Apr 17 07:57:07 debian gdm-session-worker[2152]: pam_unix(gdm3:session): session opened for user eddy by (uid=0)
Apr 17 07:57:07 debian gdm-session-worker[2152]: pam_ck_connector(gdm3:session): nox11 mode, ignoring PAM_TTY :0
Apr 17 07:57:09 debian gnome-keyring-daemon[2212]: Failed to unlock login on startup
Apr 17 07:57:12 debian polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session2 (system bus name :1.36 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale fr_FR.utf8)
Apr 17 07:58:42 debian su[2462]: Successful su for root by eddy
Apr 17 07:58:42 debian su[2462]: + /dev/pts/0 eddy:root
Apr 17 07:58:42 debian su[2462]: pam_unix(su:session): session opened for user root by eddy(uid=1000)
Apr 17 07:59:24 debian sudo: root : TTY=pts/0 ; PWD=/home/eddy ; USER=root ; COMMAND=/usr/bin/gedit /var/log/auth.log[/code]

Salut,

Où est-ce que je peux chercher si j’ai eu de la visite ?

lmt> cd /var/log
lmt> ll
drwxr-xr-x 3 root root 4096 Apr 16 20:35 .
drwxr-xr-x 12 root root 4096 Mar 10 21:02 …
drwx------ 4 root root 4096 Feb 1 11:01 cores
-rw-r–r-- 1 root root 0 Feb 1 11:01 log.nmbd
-rw-r–r-- 1 root root 0 Feb 1 11:01 log.smbd
-rw-r–r-- 1 root root 116637 Apr 16 20:36 messages
-rw-r–r-- 1 root root 8798 Apr 16 15:42 messages.0.gz
-rw-r–r-- 1 root root 8981 Apr 13 03:47 messages.1.gz
-rw-r–r-- 1 root root 8789 Apr 9 17:42 messages.2.gz
-rw-r–r-- 1 root root 8680 Mar 27 14:01 messages.3.gz
-rw------- 1 root root 7673 Apr 17 00:00 synobackup.log
-rw------- 1 root root 116 Apr 16 20:36 synonetbkp.log
-rw------- 1 root root 1738 Apr 17 00:00 synosys.log
-rw-rw-rw- 1 root root 372 Mar 9 10:59 synoupdate.log

Re,

Euréka, le routeur envoie ses messages vers “messages” (5 tentatives en 5 minutes) puis il bloque cet IP :041

Merci d’avoir attiré mon attention vers ces intrusions. C’est au moins la preuve que de ce côté mon site n’est pas un panier percé :slightly_smiling:

Salut,
j’ai pas regardé tes logs en détail, mais si quelqu’un se connecte avec ton user et que tu es sur qu’a l’heure dite ce n’est pas toi, ça pue… Ton système est corrompu.
Change immédiatement de mot de passe pour toi et ton root - Choisi des mots de passe en béton armé…;
Enlève tous les utilisateurs de sudoers;
SSH est activé ?

merci pour ta réponse.
comment on voit si ssh est activé ?
eddy

Salut,

Re,

Tu penses que quelqu’un tente de se connecter en ton absence ?