Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 Aug 2004 17:09:00 +0200
From:      Radek Kozlowski <radek@raadradd.com>
To:        freebsd-questions@freebsd.org, jacoulter@jacoulter.net
Subject:   Re: Security question - uids of 0
Message-ID:  <20040816150900.GC39290@werd>
In-Reply-To: <20040816145737.GA3924@sara.mshome.net>
References:  <20040816145737.GA3924@sara.mshome.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Aug 16, 2004 at 09:57:37AM -0500, James A. Coulter wrote:
> The following appeared in my latest daily security run output:
> 
> 	Checking for uids of 0:
> 	root 0
> 	toor 0
> 
> This is the first time I've seen this message.
> 
> I checked /etc/passwd and found this:
> 
> 	root:*:0:0:Charlie &:/root:/bin/csh
> 	toor:*:0:0:Bourne-again Superuser:/root:
> 
> I am running FreeBSD 4.10 as a gateway/router/firewall with IPFW for a small
> home LAN.  
> 
> I ran ps -aux and looked for any processes owned by "toor" but didn't find any.
> 
> Is this something to be concerned about?  
> 
> Sorry if this is an obvious question, but I am still very much a newbie
> and trying to learn what I can about security.
> 
> Thanks for your patience,

http://www.freebsd.org/doc/faq/security.html#TOOR-ACCOUNT

-Radek



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040816150900.GC39290>