local user get created magically ! system hacked ?
joe at zeff.us
Tue Dec 3 22:19:43 UTC 2013
On 12/03/2013 02:08 PM, Jehan Procaccia wrote:
> Scary ! how comes gnome-initial-setup could create users, and morever
> add them to the wheel group !
> could it be a bug in /gnome-initial-setup , /a feature side effect ? or
> our students found a "back door" ?
> any suggestion greatly appreciated .
Two questions here: first, is there anything relevant in
/var/log/messages? If so, it might tell you who ran useradd. Second,
who, other than you, has either the root password or is in the wheel group?
More information about the users