Re: Who is 'nobody'?

[Timmy Douglas <tdouglas@home.com>]

Johann Spies <jhspies@adept.co.za> writes:

> I have seen this message two times now after using apt-get on a
> dialup-system:
> 
> ------------------------------------
> Unusual System Events
> =-=-=-=-=-=-=-=-=-=-=
> Nov 30 06:25:03 spyker su[6400]: + ??? root-nobody
> Nov 30 06:25:03 spyker PAM_unix[6400]: (su) session opened for user
> nobody by
> +(uid=0)
> ----------------------------------------
> 
> At this time (06:25:03) I was not online.
> 
> Who is this "nobody"?

i think it is just a user with like almost no privledges...
root would su to it to lose privledges and be less dangerous.