local user get created magically ! system hacked ?

Joe Zeff joe at zeff.us
Tue Dec 3 22:19:43 UTC 2013

On 12/03/2013 02:08 PM, Jehan Procaccia wrote:
> Scary ! how comes gnome-initial-setup could create users, and morever
> add them to the wheel group !
> could it be a bug in /gnome-initial-setup , /a feature side effect ? or
> our students found a "back door" ?
> any suggestion greatly appreciated .

Two questions here: first, is there anything relevant in 
/var/log/messages?  If so, it might tell you who ran useradd.  Second, 
who, other than you, has either the root password or is in the wheel group?

More information about the users mailing list