<p dir="ltr">Ja that was me sorry!</p>
<div class="gmail_quote">On Mar 10, 2015 2:33 AM, "Marc Juul" <<a href="mailto:juul@labitat.dk">juul@labitat.dk</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Anyone know anything about this? Looks suspiciously like someone gained some level of access to the server.<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Mar 9, 2015 at 7:49 PM,  <span dir="ltr"><<a href="mailto:web-ooo@omnicommons.org" target="_blank">web-ooo@omnicommons.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><a href="http://omnicommons.org" target="_blank">omnicommons.org</a> : Mar  9 19:49:29 : web-ooo : user NOT in sudoers ; TTY=pts/6 ; PWD=/home/web-ooo ; USER=root ; COMMAND=/bin/su jenny<br>
<div><div><br>
_______________________________________________<br>
sysadmins mailing list<br>
<a href="mailto:sysadmins@lists.omnicommons.org" target="_blank">sysadmins@lists.omnicommons.org</a><br>
<a href="https://omnicommons.org/lists/listinfo/sysadmins" target="_blank">https://omnicommons.org/lists/listinfo/sysadmins</a><br>
</div></div></blockquote></div><br></div>
<br>_______________________________________________<br>
sudo-sys mailing list<br>
<a href="mailto:sudo-sys@lists.sudoroom.org">sudo-sys@lists.sudoroom.org</a><br>
<a href="https://lists.sudoroom.org/listinfo/sudo-sys" target="_blank">https://lists.sudoroom.org/listinfo/sudo-sys</a><br>
<br></blockquote></div>