messages log file - su

[Andrew Galdes]

Hi Micheal,

yes, it looks like a crond thing. And it makes sence what it's doing.
Never noticed it before.

Thanks for the answer. 

> It means root has su'd to the user nobody.
> This could be from cron jobs (and based on the nice times, probably is
> -
> I assume your other cron jobs take the ~30secs to run prior to this
> job
> starting) something like updatedb from slocate package could give you
> such logs, as by default it uses nobody to index, not root for obvious
> reasons.

> > Oct 29 19:15:35 mailsrv su: (to nobody) root on none
> > Oct 29 19:15:35 mailsrv su: (to nobody) root on none
> > Oct 29 19:15:35 mailsrv su: (to nobody) root on none
> > Oct 29 19:15:35 mailsrv su: (to nobody) root on none
> > Oct 29 19:15:35 mailsrv su: (to nobody) root on none

Thanks,
-Andrew