In article <[🔎] ECCE1C17FAB85140A69454A40B443FCA41508C@CORREOWEB.puj.edu.co> you wrote: > Does any body know what this is mean: > > su[32278]: + ??? root-nobody > > I found this line in my auth.log file. It means some root process has used su to drop priveledges and become nobody. cron jobs are known to do that. Gruss Bernd