Bonjour à quoi correspondent ces lignes?
Sep 3 06:39:46 hostname su[5451]: Successful su for nobody by root
Sep 3 06:39:46 hostname su[5451]: + ??? root:nobody
est ce que c’est parce que j’ai supprimé un utilisateur?
j’ai la réponse
FYI: The nobody account is an account with few privileges that is used
by some daemons as a safety measure. As an example, OpenVPN changes to
user nobody after it has finished starting so that if the daemon were to
be compromised by a malformed packet exploiting a vulnerability, it
still couldn’t make the daemon cause any system damage.
je ne l’avais jamais vu avant ^^