[Wylug-help] avahi-autoipd

[Imran << Javeed]

Log watch told me today that on my server:

--------------------- Connections (secure-log) Begin ------------------

  New Users:
     avahi-autoipd (100)

  New Groups:
     avahi-autoipd (101)


  Userhelper executed applications:
     root -> system-config-services as root:  2 Time(s)
     root -> pup as root:  1 Time(s)

  Changed users default login shell:
     User gdm change shell from /sbin/nologin to /sbin/nologin: 1 Time(s)

  ---------------------- Connections (secure-log) End -------------------
@@@@@@@@@@@@@@@@@@

Double check your history, just make sure you didn't execute anything by accident

Imran
Regards

Imran Javeed

-----Original Message-----
From: Roger <roger at roger-beaumont.co.uk>

Date: Wed, 6 May 2009 12:15:47 
To: WYLUG HELP<wylug-help at wylug.org.uk>
Subject: [Wylug-help] avahi-autoipd


Logwatch told me today that on my server:

--------------------- Connections (secure-log) Begin ------------------

  New Users:
     avahi-autoipd (100)

  New Groups:
     avahi-autoipd (101)


  Userhelper executed applications:
     root -> system-config-services as root:  2 Time(s)
     root -> pup as root:  1 Time(s)

  Changed users default login shell:
     User gdm change shell from /sbin/nologin to /sbin/nologin: 1 Time(s)

  ---------------------- Connections (secure-log) End -------------------


I didn't initiate this.  Have I been hacked?

Roger

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________

_______________________________________________
Wylug-help mailing list
Wylug-help at wylug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/wylug-help