Odd find in authentication log
Posted: Sat Dec 31, 2011 5:48 am
Hey there!
Found this in my logwatch report. Checked out /var/log/secure and found these two entries I personally didn't do:
Dec 30 21:02:30 localhost usermod[30054]: add 'apache' to group 'users'
Dec 30 21:02:30 localhost usermod[30054]: add 'apache' to shadow group 'users'
Has my Amahi box been compromised? Thanks for your help!
Found this in my logwatch report. Checked out /var/log/secure and found these two entries I personally didn't do:
Dec 30 21:02:30 localhost usermod[30054]: add 'apache' to group 'users'
Dec 30 21:02:30 localhost usermod[30054]: add 'apache' to shadow group 'users'
Has my Amahi box been compromised? Thanks for your help!