Re: Was I hacked into? who is user "nobody"? please help....
On Mon, Nov 05, 2001 at 09:59:54AM -0500, Gianguido Cianci wrote:
> a few minutes ago I heard my PC getting into a lot of fuss over something,
> the HDD was spinning like crazy... so I looked at "top" and found that user
>
> "nobody" was running a "find" comand....
You were not hacked into.
(1) look at /etc/crontab
(2) look at /etc/cron.daily/*
(3) look at /etc/cron.daily/find
(4) man updatedb
Basically, all the things in /etc/cron.daily are run at 6h25 every
morning. /etc/cron.daily/find updates the database of file names used by
the locate command line utility by calleing updatedb as user 'nobody'.
Luca
--
Luca Filipozzi
[dpkg] We are the apt. Resistance is futile. You will be packaged.
Reply to: