wirus czy w

Ogólne pytania dotyczące systemu
manco77
Posty: 10
Rejestracja: 22 listopada 2014, 18:36

wirus czy włamanie ?

Post autor: manco77 »

witam
wczoraj miałem dziwny przypadek na Debianie 8.2 sluchalem muzyki na programie audacious w pewnym momencie program oszalał nie dało się nic z nim zrobić po czym odtworzyło się okienko logowania do synaptica i ktoś kilku krotnie próbował wpisać hasło roota po zresetowaniu Debiana wszystko wróciło do normy czy Debian zapisuje takie sytuacje da się ustalić co to było
Awatar użytkownika
hsurim
Beginner
Posty: 303
Rejestracja: 05 maja 2014, 17:15
Lokalizacja: Warszawa (mazowieckie)

Post autor: hsurim »

Instalowałeś coś spoza repozytoriów ?
Dodawałeś jakieś ppa ?

p.s.: miło by było czytać, gdybyś używał znaków interpunkcyjnych.
manco77
Posty: 10
Rejestracja: 22 listopada 2014, 18:36

Post autor: manco77 »

tylko libre office i steam kilka gier
klavierkrk
Beginner
Posty: 257
Rejestracja: 14 maja 2013, 17:18

Post autor: klavierkrk »

pokaz

Kod: Zaznacz cały

iptables -L
Awatar użytkownika
marcin1982
Moderator
Posty: 1730
Rejestracja: 05 maja 2011, 12:59
Lokalizacja: Zagłębie Dąbrowskie

Post autor: marcin1982 »

Podaj wynik poleceń:

Kod: Zaznacz cały

cat /var/log/auth.log

Kod: Zaznacz cały

tail -n 100 /var/log/apt/history.log

Kod: Zaznacz cały

cat /etc/passwd

Kod: Zaznacz cały

stat /etc/passwd
manco77
Posty: 10
Rejestracja: 22 listopada 2014, 18:36

Post autor: manco77 »

Kod: Zaznacz cały

iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination         
ufw-before-logging-input  all  --  anywhere             anywhere            
ufw-before-input  all  --  anywhere             anywhere            
ufw-after-input  all  --  anywhere             anywhere            
ufw-after-logging-input  all  --  anywhere             anywhere            
ufw-reject-input  all  --  anywhere             anywhere            
ufw-track-input  all  --  anywhere             anywhere            

Chain FORWARD (policy DROP)
target     prot opt source               destination         
ufw-before-logging-forward  all  --  anywhere             anywhere            
ufw-before-forward  all  --  anywhere             anywhere            
ufw-after-forward  all  --  anywhere             anywhere            
ufw-after-logging-forward  all  --  anywhere             anywhere            
ufw-reject-forward  all  --  anywhere             anywhere            

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
ufw-before-logging-output  all  --  anywhere             anywhere            
ufw-before-output  all  --  anywhere             anywhere            
ufw-after-output  all  --  anywhere             anywhere            
ufw-after-logging-output  all  --  anywhere             anywhere            
ufw-reject-output  all  --  anywhere             anywhere            
ufw-track-output  all  --  anywhere             anywhere            

Chain ufw-after-forward (1 references)
target     prot opt source               destination         

Chain ufw-after-input (1 references)
target     prot opt source               destination         
ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:netbios-ns
ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:netbios-dgm
ufw-skip-to-policy-input  tcp  --  anywhere             anywhere             tcp dpt:netbios-ssn
ufw-skip-to-policy-input  tcp  --  anywhere             anywhere             tcp dpt:microsoft-ds
ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:bootps
ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:bootpc
ufw-skip-to-policy-input  all  --  anywhere             anywhere             ADDRTYPE match dst-type BROADCAST

Chain ufw-after-logging-forward (1 references)
target     prot opt source               destination         
LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "

Chain ufw-after-logging-input (1 references)
target     prot opt source               destination         
LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "

Chain ufw-after-logging-output (1 references)
target     prot opt source               destination         

Chain ufw-after-output (1 references)
target     prot opt source               destination         

Chain ufw-before-forward (1 references)
target     prot opt source               destination         
ufw-user-forward  all  --  anywhere             anywhere            

Chain ufw-before-input (1 references)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ufw-logging-deny  all  --  anywhere             anywhere             state INVALID
DROP       all  --  anywhere             anywhere             state INVALID
ACCEPT     icmp --  anywhere             anywhere             icmp destination-unreachable
ACCEPT     icmp --  anywhere             anywhere             icmp source-quench
ACCEPT     icmp --  anywhere             anywhere             icmp time-exceeded
ACCEPT     icmp --  anywhere             anywhere             icmp parameter-problem
ACCEPT     icmp --  anywhere             anywhere             icmp echo-request
ACCEPT     udp  --  anywhere             anywhere             udp spt:bootps dpt:bootpc
ufw-not-local  all  --  anywhere             anywhere            
ACCEPT     udp  --  anywhere             224.0.0.251          udp dpt:mdns
ACCEPT     udp  --  anywhere             239.255.255.250      udp dpt:1900
ufw-user-input  all  --  anywhere             anywhere            

Chain ufw-before-logging-forward (1 references)
target     prot opt source               destination         

Chain ufw-before-logging-input (1 references)
target     prot opt source               destination         

Chain ufw-before-logging-output (1 references)
target     prot opt source               destination         

Chain ufw-before-output (1 references)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ufw-user-output  all  --  anywhere             anywhere            

Chain ufw-logging-allow (0 references)
target     prot opt source               destination         
LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "

Chain ufw-logging-deny (2 references)
target     prot opt source               destination         
RETURN     all  --  anywhere             anywhere             state INVALID limit: avg 3/min burst 10
LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "

Chain ufw-not-local (1 references)
target     prot opt source               destination         
RETURN     all  --  anywhere             anywhere             ADDRTYPE match dst-type LOCAL
RETURN     all  --  anywhere             anywhere             ADDRTYPE match dst-type MULTICAST
RETURN     all  --  anywhere             anywhere             ADDRTYPE match dst-type BROADCAST
ufw-logging-deny  all  --  anywhere             anywhere             limit: avg 3/min burst 10
DROP       all  --  anywhere             anywhere            

Chain ufw-reject-forward (1 references)
target     prot opt source               destination         

Chain ufw-reject-input (1 references)
target     prot opt source               destination         

Chain ufw-reject-output (1 references)
target     prot opt source               destination         

Chain ufw-skip-to-policy-forward (0 references)
target     prot opt source               destination         
DROP       all  --  anywhere             anywhere            

Chain ufw-skip-to-policy-input (7 references)
target     prot opt source               destination         
DROP       all  --  anywhere             anywhere            

Chain ufw-skip-to-policy-output (0 references)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            

Chain ufw-track-input (1 references)
target     prot opt source               destination         

Chain ufw-track-output (1 references)
target     prot opt source               destination         
ACCEPT     tcp  --  anywhere             anywhere             state NEW
ACCEPT     udp  --  anywhere             anywhere             state NEW

Chain ufw-user-forward (1 references)
target     prot opt source               destination         

Chain ufw-user-input (1 references)
target     prot opt source               destination         

Chain ufw-user-limit (0 references)
target     prot opt source               destination         
LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
REJECT     all  --  anywhere             anywhere             reject-with icmp-port-unreachable

Chain ufw-user-limit-accept (0 references)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            

Chain ufw-user-logging-forward (0 references)
target     prot opt source               destination         

Chain ufw-user-logging-input (0 references)
target     prot opt source               destination         

Chain ufw-user-logging-output (0 references)
target     prot opt source               destination         

Chain ufw-user-output (1 references)
target     prot opt source

[B]cat /var/log/auth.log
_[/B]format.py -d /dev/sdb -f fat32 -l USB Stick -u 1000 -g 1000]
Oct 19 09:33:33 debian-64 su[1489]: Successful su for root by pawel
Oct 19 09:33:33 debian-64 su[1489]: + /dev/pts/0 pawel:root
Oct 19 09:33:33 debian-64 su[1489]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 19 09:54:09 debian-64 su[1489]: pam_unix(su:session): session closed for user root
Oct 19 10:17:01 debian-64 CRON[1548]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 10:17:01 debian-64 CRON[1548]: pam_unix(cron:session): session closed for user root
Oct 19 11:17:01 debian-64 CRON[1694]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 11:17:01 debian-64 CRON[1694]: pam_unix(cron:session): session closed for user root
Oct 19 11:34:48 debian-64 systemd-logind[601]: System is powering down.
Oct 19 16:36:33 debian-64 systemd-logind[598]: New seat seat0.
Oct 19 16:36:33 debian-64 systemd-logind[598]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 19 16:36:33 debian-64 systemd-logind[598]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 19 16:36:39 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 19 16:36:39 debian-64 systemd-logind[598]: New session c1 of user lightdm.
Oct 19 16:36:39 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 19 16:37:16 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 19 16:37:16 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 19 16:37:16 debian-64 systemd-logind[598]: New session 1 of user pawel.
Oct 19 16:37:16 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 19 16:37:19 debian-64 gnome-keyring-daemon[1114]: The SSH agent was already initialized
Oct 19 16:37:19 debian-64 gnome-keyring-daemon[1114]: The PKCS#11 component was already initialized
Oct 19 16:37:19 debian-64 gnome-keyring-daemon[1114]: The GPG agent was already initialized
Oct 19 16:37:19 debian-64 gnome-keyring-daemon[1114]: The Secret Service was already initialized
Oct 19 16:37:19 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.22 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 19 16:37:43 debian-64 su[1360]: Successful su for root by pawel
Oct 19 16:37:43 debian-64 su[1360]: + /dev/pts/0 pawel:root
Oct 19 16:37:43 debian-64 su[1360]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 19 16:38:56 debian-64 su[1360]: pam_unix(su:session): session closed for user root
Oct 19 16:49:14 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user :p awel to gain TEMPORARY authorization for action org.freedesktop.policykit.pkexec.run-im for unix-process:1680:76104 [/usr/bin/python2 /usr/lib/mintstick/mintstick.py -m format] (owned by unix-user :p awel)
Oct 19 16:49:14 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 19 16:49:14 debian-64 pkexec[1693]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/bin/python2 -u /usr/lib/mintstick/raw_format.py -d /dev/sdb -f fat32 -l Debian -u 1000 -g 1000]
Oct 19 16:49:33 debian-64 su[1759]: Successful su for root by pawel
Oct 19 16:49:33 debian-64 su[1759]: + /dev/pts/0 pawel:root
Oct 19 16:49:33 debian-64 su[1759]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 19 16:56:39 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user :p awel to gain TEMPORARY authorization for action org.freedesktop.policykit.pkexec.run-im for unix-process:1898:116060 [/usr/bin/python2 /usr/lib/mintstick/mintstick.py -m format] (owned by unix-user :p awel)
Oct 19 16:56:39 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 19 16:56:39 debian-64 pkexec[1970]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/bin/python2 -u /usr/lib/mintstick/raw_format.py -d /dev/sdb -f fat32 -l Debian -u 1000 -g 1000]
Oct 19 17:15:06 debian-64 su[1759]: pam_unix(su:session): session closed for user root
Oct 19 17:17:01 debian-64 CRON[2220]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 17:17:02 debian-64 CRON[2220]: pam_unix(cron:session): session closed for user root
Oct 19 17:17:51 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user :p awel to gain TEMPORARY authorization for action org.freedesktop.policykit.pkexec.run-im for unix-process:2272:247587 [/usr/bin/python2 /usr/lib/mintstick/mintstick.py -m format] (owned by unix-user :p awel)
Oct 19 17:17:51 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 19 17:17:51 debian-64 pkexec[2279]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/bin/python2 -u /usr/lib/mintstick/raw_format.py -d /dev/sdb -f fat32 -l STICK2GB -u 1000 -g 1000]
Oct 19 18:17:01 debian-64 CRON[2436]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 18:17:01 debian-64 CRON[2436]: pam_unix(cron:session): session closed for user root
Oct 19 19:17:01 debian-64 CRON[2482]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 19:17:01 debian-64 CRON[2482]: pam_unix(cron:session): session closed for user root
Oct 19 19:26:30 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user :p awel to gain TEMPORARY authorization for action org.freedesktop.policykit.pkexec.run-im for unix-process:2563:1017837 [/usr/bin/python2 /usr/lib/mintstick/mintstick.py -m format] (owned by unix-user :p awel)
Oct 19 19:26:30 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 19 19:26:30 debian-64 pkexec[2582]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/bin/python2 -u /usr/lib/mintstick/raw_format.py -d /dev/sdb -f fat32 -l raspbian -u 1000 -g 1000]
Oct 19 19:26:50 debian-64 su[2645]: Successful su for root by pawel
Oct 19 19:26:50 debian-64 su[2645]: + /dev/pts/0 pawel:root
Oct 19 19:26:50 debian-64 su[2645]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 19 19:45:34 debian-64 su[2645]: pam_unix(su:session): session closed for user root
Oct 19 20:17:01 debian-64 CRON[2944]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 20:17:01 debian-64 CRON[2944]: pam_unix(cron:session): session closed for user root
Oct 19 21:17:01 debian-64 CRON[3212]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 21:17:01 debian-64 CRON[3212]: pam_unix(cron:session): session closed for user root
Oct 19 21:31:28 debian-64 systemd-logind[598]: System is powering down.
Oct 19 21:31:28 debian-64 gnome-keyring-daemon[1114]: g_dbus_connection_real_closed: Remote peer vanished with error: Underlying GIOStream returned 0 bytes on an async read (g-io-error-quark, 0). Exiting.
Oct 20 16:43:47 debian-64 systemd-logind[599]: New seat seat0.
Oct 20 16:43:47 debian-64 systemd-logind[599]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 20 16:43:47 debian-64 systemd-logind[599]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 20 16:43:54 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 20 16:43:54 debian-64 systemd-logind[599]: New session c1 of user lightdm.
Oct 20 16:43:54 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 20 16:44:44 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 20 16:44:44 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 20 16:44:44 debian-64 systemd-logind[599]: New session 1 of user pawel.
Oct 20 16:44:44 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 20 16:44:48 debian-64 gnome-keyring-daemon[1117]: The SSH agent was already initialized
Oct 20 16:44:48 debian-64 gnome-keyring-daemon[1117]: The PKCS#11 component was already initialized
Oct 20 16:44:49 debian-64 gnome-keyring-daemon[1117]: The GPG agent was already initialized
Oct 20 16:44:49 debian-64 gnome-keyring-daemon[1117]: The Secret Service was already initialized
Oct 20 16:44:49 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.24 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 20 16:48:30 debian-64 su[1479]: Successful su for root by pawel
Oct 20 16:48:30 debian-64 su[1479]: + /dev/pts/0 pawel:root
Oct 20 16:48:30 debian-64 su[1479]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 20 16:49:39 debian-64 su[1479]: pam_unix(su:session): session closed for user root
Oct 20 17:17:02 debian-64 CRON[1937]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 20 17:17:02 debian-64 CRON[1937]: pam_unix(cron:session): session closed for user root
Oct 20 18:17:01 debian-64 CRON[1970]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 20 18:17:02 debian-64 CRON[1970]: pam_unix(cron:session): session closed for user root
Oct 20 19:17:01 debian-64 CRON[2005]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 20 19:17:01 debian-64 CRON[2005]: pam_unix(cron:session): session closed for user root
Oct 20 20:17:01 debian-64 CRON[2250]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 20 20:17:01 debian-64 CRON[2250]: pam_unix(cron:session): session closed for user root
Oct 20 21:17:02 debian-64 CRON[3770]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 20 21:17:02 debian-64 CRON[3770]: pam_unix(cron:session): session closed for user root
Oct 20 21:26:45 debian-64 systemd-logind[599]: System is powering down.
Oct 21 17:01:14 debian-64 systemd-logind[599]: New seat seat0.
Oct 21 17:01:14 debian-64 systemd-logind[599]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 21 17:01:14 debian-64 systemd-logind[599]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 21 17:01:19 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 21 17:01:19 debian-64 systemd-logind[599]: New session c1 of user lightdm.
Oct 21 17:01:19 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 21 17:01:52 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 21 17:01:52 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 21 17:01:52 debian-64 systemd-logind[599]: New session 1 of user pawel.
Oct 21 17:01:52 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 21 17:01:56 debian-64 gnome-keyring-daemon[1168]: The SSH agent was already initialized
Oct 21 17:01:56 debian-64 gnome-keyring-daemon[1168]: The PKCS#11 component was already initialized
Oct 21 17:01:57 debian-64 gnome-keyring-daemon[1168]: The GPG agent was already initialized
Oct 21 17:01:57 debian-64 gnome-keyring-daemon[1168]: The Secret Service was already initialized
Oct 21 17:01:57 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.24 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 21 17:02:22 debian-64 su[1413]: pam_unix(su:auth): authentication failure; logname=pawel uid=1000 euid=0 tty=/dev/pts/0 ruser=pawel rhost=  user=root
Oct 21 17:02:24 debian-64 su[1413]: pam_authenticate: Authentication failure
Oct 21 17:02:24 debian-64 su[1413]: FAILED su for root by pawel
Oct 21 17:02:24 debian-64 su[1413]: - /dev/pts/0 pawel:root
Oct 21 17:02:30 debian-64 su[1414]: Successful su for root by pawel
Oct 21 17:02:30 debian-64 su[1414]: + /dev/pts/0 pawel:root
Oct 21 17:02:30 debian-64 su[1414]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 21 17:04:48 debian-64 su[1414]: pam_unix(su:session): session closed for user root
Oct 21 17:17:01 debian-64 CRON[25778]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 21 17:17:01 debian-64 CRON[25778]: pam_unix(cron:session): session closed for user root
Oct 21 17:20:25 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:25799:116338 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 21 17:20:25 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 21 17:20:25 debian-64 pkexec[25801]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 21 18:17:02 debian-64 CRON[26219]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 21 18:17:02 debian-64 CRON[26219]: pam_unix(cron:session): session closed for user root
Oct 21 19:17:02 debian-64 CRON[26245]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 21 19:17:02 debian-64 CRON[26245]: pam_unix(cron:session): session closed for user root
Oct 21 20:08:17 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user :p awel to gain TEMPORARY authorization for action org.freedesktop.policykit.pkexec.run-im for unix-process:26457:1121393 [/usr/bin/python2 /usr/lib/mintstick/mintstick.py -m format] (owned by unix-user :p awel)
Oct 21 20:08:17 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 21 20:08:17 debian-64 pkexec[26468]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/bin/python2 -u /usr/lib/mintstick/raw_format.py -d /dev/sdb -f fat32 -l MP3-AUDIO -u 1000 -g 1000]
Oct 21 20:17:01 debian-64 CRON[27663]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 21 20:17:01 debian-64 CRON[27663]: pam_unix(cron:session): session closed for user root
Oct 21 21:01:54 debian-64 polkitd(authority=local): Operator of unix-session:1 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.synaptic for unix-process:30615:1445283 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 21 21:01:54 debian-64 pkexec[30616]: pawel: Error executing command as another user: Not authorized [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 21 21:01:56 debian-64 polkitd(authority=local): Operator of unix-session:1 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.synaptic for unix-process:30618:1445286 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 21 21:01:56 debian-64 pkexec[30619]: pawel: Error executing command as another user: Not authorized [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 21 21:01:58 debian-64 polkitd(authority=local): Operator of unix-session:1 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.synaptic for unix-process:30624:1445289 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 21 21:01:58 debian-64 pkexec[30625]: pawel: Error executing command as another user: Not authorized [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 21 21:02:00 debian-64 polkitd(authority=local): Operator of unix-session:1 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.synaptic for unix-process:30611:1445281 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 21 21:02:00 debian-64 pkexec[30612]: pawel: Error executing command as another user: Not authorized [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 21 21:02:01 debian-64 polkit-agent-helper-1[30704]: pam_unix(polkit-1:auth): authentication failure; logname= uid=1000 euid=0 tty= ruser=root rhost=  user=root
Oct 21 21:02:04 debian-64 polkit-agent-helper-1[30705]: pam_unix(polkit-1:auth): authentication failure; logname= uid=1000 euid=0 tty= ruser=root rhost=  user=root
Oct 21 21:02:16 debian-64 systemd-logind[599]: System is rebooting.
Oct 21 21:02:58 debian-64 systemd-logind[602]: New seat seat0.
Oct 21 21:02:58 debian-64 systemd-logind[602]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 21 21:02:58 debian-64 systemd-logind[602]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 21 21:03:04 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 21 21:03:04 debian-64 systemd-logind[602]: New session c1 of user lightdm.
Oct 21 21:03:04 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 21 21:03:14 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 21 21:03:14 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 21 21:03:14 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 21 21:03:14 debian-64 systemd-logind[602]: New session 1 of user pawel.
Oct 21 21:03:18 debian-64 gnome-keyring-daemon[1118]: The SSH agent was already initialized
Oct 21 21:03:18 debian-64 gnome-keyring-daemon[1118]: The PKCS#11 component was already initialized
Oct 21 21:03:18 debian-64 gnome-keyring-daemon[1118]: The GPG agent was already initialized
Oct 21 21:03:18 debian-64 gnome-keyring-daemon[1118]: The Secret Service was already initialized
Oct 21 21:03:19 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.24 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 21 21:04:46 debian-64 systemd-logind[602]: System is powering down.
Oct 22 17:05:47 debian-64 systemd-logind[600]: New seat seat0.
Oct 22 17:05:47 debian-64 systemd-logind[600]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 22 17:05:47 debian-64 systemd-logind[600]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 22 17:05:51 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 22 17:05:51 debian-64 systemd-logind[600]: New session c1 of user lightdm.
Oct 22 17:05:51 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 22 17:06:01 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 22 17:06:01 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 22 17:06:01 debian-64 systemd-logind[600]: New session 1 of user pawel.
Oct 22 17:06:01 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 22 17:06:05 debian-64 gnome-keyring-daemon[1168]: The SSH agent was already initialized
Oct 22 17:06:05 debian-64 gnome-keyring-daemon[1168]: The PKCS#11 component was already initialized
Oct 22 17:06:05 debian-64 gnome-keyring-daemon[1168]: The GPG agent was already initialized
Oct 22 17:06:05 debian-64 gnome-keyring-daemon[1168]: The Secret Service was already initialized
Oct 22 17:06:05 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.22 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 22 17:06:44 debian-64 su[1498]: Successful su for root by pawel
Oct 22 17:06:44 debian-64 su[1498]: + /dev/pts/0 pawel:root
Oct 22 17:06:44 debian-64 su[1498]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 17:10:23 debian-64 su[1498]: pam_unix(su:session): session closed for user root
Oct 22 17:17:01 debian-64 CRON[1632]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 17:17:01 debian-64 CRON[1632]: pam_unix(cron:session): session closed for user root
Oct 22 18:15:06 debian-64 su[2086]: Successful su for root by pawel
Oct 22 18:15:06 debian-64 su[2086]: + /dev/pts/0 pawel:root
Oct 22 18:15:06 debian-64 su[2086]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 18:17:01 debian-64 CRON[2130]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 18:17:01 debian-64 CRON[2130]: pam_unix(cron:session): session closed for user root
Oct 22 18:27:45 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:6260:492901 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 22 18:27:45 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 22 18:27:45 debian-64 pkexec[6261]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 22 18:30:02 debian-64 su[2086]: pam_unix(su:session): session closed for user root
Oct 22 18:34:39 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:7008:534415 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 22 18:34:39 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 22 18:34:39 debian-64 pkexec[7010]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 22 18:37:27 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:7038:551056 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 22 18:37:27 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 22 18:37:27 debian-64 pkexec[7040]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 22 18:38:59 debian-64 su[7407]: Successful su for root by pawel
Oct 22 18:38:59 debian-64 su[7407]: + /dev/pts/0 pawel:root
Oct 22 18:38:59 debian-64 su[7407]: pam_unix(su:session): session opened for user root by (uid=1000)
Oct 22 18:39:10 debian-64 su[7407]: pam_unix(su:session): session closed for user root
Oct 22 18:39:23 debian-64 su[7497]: Successful su for root by pawel
Oct 22 18:39:23 debian-64 su[7497]: + /dev/pts/0 pawel:root
Oct 22 18:39:23 debian-64 su[7497]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 18:49:16 debian-64 su[7497]: pam_unix(su:session): session closed for user root
Oct 22 18:52:59 debian-64 su[9980]: Successful su for root by pawel
Oct 22 18:52:59 debian-64 su[9980]: + /dev/pts/0 pawel:root
Oct 22 18:52:59 debian-64 su[9980]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 19:05:31 debian-64 gnome-keyring-daemon[1168]: g_dbus_connection_real_closed: Remote peer vanished with error: Underlying GIOStream returned 0 bytes on an async read (g-io-error-quark, 0). Exiting.
Oct 22 19:05:31 debian-64 polkitd(authority=local): Unregistered Authentication Agent for unix-session:1 (system bus name :1.22, object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8) (disconnected from bus)
Oct 22 19:06:03 debian-64 systemd-logind[606]: New seat seat0.
Oct 22 19:06:03 debian-64 systemd-logind[606]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 22 19:06:03 debian-64 systemd-logind[606]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 22 19:06:08 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 22 19:06:08 debian-64 systemd-logind[606]: New session c1 of user lightdm.
Oct 22 19:06:08 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 22 19:06:18 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 22 19:06:18 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 22 19:06:18 debian-64 systemd-logind[606]: New session 1 of user pawel.
Oct 22 19:06:18 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 22 19:06:22 debian-64 gnome-keyring-daemon[1166]: The SSH agent was already initialized
Oct 22 19:06:22 debian-64 gnome-keyring-daemon[1166]: The PKCS#11 component was already initialized
Oct 22 19:06:22 debian-64 gnome-keyring-daemon[1166]: The GPG agent was already initialized
Oct 22 19:06:22 debian-64 gnome-keyring-daemon[1166]: The Secret Service was already initialized
Oct 22 19:06:22 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.22 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 22 19:06:43 debian-64 su[1412]: Successful su for root by pawel
Oct 22 19:06:43 debian-64 su[1412]: + /dev/pts/0 pawel:root
Oct 22 19:06:43 debian-64 su[1412]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 19:06:57 debian-64 su[1412]: pam_unix(su:session): session closed for user root
Oct 22 19:08:03 debian-64 su[1489]: Successful su for root by pawel
Oct 22 19:08:03 debian-64 su[1489]: + /dev/pts/0 pawel:root
Oct 22 19:08:03 debian-64 su[1489]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 19:08:58 debian-64 su[1489]: pam_unix(su:session): session closed for user root
Oct 22 19:17:03 debian-64 CRON[2341]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 19:17:04 debian-64 CRON[2341]: pam_unix(cron:session): session closed for user root
Oct 22 20:17:01 debian-64 CRON[2564]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 20:17:01 debian-64 CRON[2564]: pam_unix(cron:session): session closed for user root
Oct 22 21:12:54 debian-64 systemd-logind[606]: System is powering down.
Oct 22 21:12:56 debian-64 gnome-keyring-daemon[1166]: g_dbus_connection_real_closed: Remote peer vanished with error: Underlying GIOStream returned 0 bytes on an async read (g-io-error-quark, 0). Exiting.
Oct 22 21:12:56 debian-64 polkitd(authority=local): Unregistered Authentication Agent for unix-session:1 (system bus name :1.22, object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8) (disconnected from bus)
Oct 23 12:24:45 debian-64 systemd-logind[605]: New seat seat0.
Oct 23 12:24:45 debian-64 systemd-logind[605]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 23 12:24:45 debian-64 systemd-logind[605]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 23 12:24:51 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 23 12:24:51 debian-64 systemd-logind[605]: New session c1 of user lightdm.
Oct 23 12:24:51 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 23 12:25:00 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 23 12:25:00 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 23 12:25:00 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 23 12:25:00 debian-64 systemd-logind[605]: New session 1 of user pawel.
Oct 23 12:25:04 debian-64 gnome-keyring-daemon[1156]: The SSH agent was already initialized
Oct 23 12:25:04 debian-64 gnome-keyring-daemon[1156]: The PKCS#11 component was already initialized
Oct 23 12:25:05 debian-64 gnome-keyring-daemon[1156]: The GPG agent was already initialized
Oct 23 12:25:05 debian-64 gnome-keyring-daemon[1156]: The Secret Service was already initialized
Oct 23 12:25:05 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.24 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 23 12:25:30 debian-64 su[1444]: pam_unix(su:auth): authentication failure; logname=pawel uid=1000 euid=0 tty=/dev/pts/0 ruser=pawel rhost=  user=root
Oct 23 12:25:32 debian-64 su[1444]: pam_authenticate: Authentication failure
Oct 23 12:25:32 debian-64 su[1444]: FAILED su for root by pawel
Oct 23 12:25:32 debian-64 su[1444]: - /dev/pts/0 pawel:root
Oct 23 12:25:37 debian-64 su[1474]: Successful su for root by pawel
Oct 23 12:25:37 debian-64 su[1474]: + /dev/pts/0 pawel:root
Oct 23 12:25:37 debian-64 su[1474]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
root@debian-64:/home/pawel/Pulpit#

tail -n 100 /var/log/apt/history.log
Start-Date: 2015-09-21  19:23:05
Commandline: /usr/sbin/synaptic
Install: libmediaart-1.0-0:amd64 (0.7.0-2, automatic), libnautilus-extension1a:amd64 (3.14.1-2, automatic), libtracker-sparql-1.0-0:amd64 (1.2.4-2, automatic), brasero:amd64 (3.11.4-1.1), libiptcdata0:amd64 (1.0.4-4, automatic)
End-Date: 2015-09-21  19:23:49

Start-Date: 2015-09-21  19:25:49
Commandline: /usr/sbin/synaptic
Install: gawk:amd64 (4.1.1+dfsg-1, automatic), liblavjpeg-2.1-0:amd64 (2.1.0-dmo6, automatic), twolame:amd64 (0.3.13-1.1, automatic), mjpegtools:amd64 (2.1.0-dmo6, automatic), libmjpegutils-2.1-0:amd64 (2.1.0-dmo6, automatic), sox:amd64 (14.4.1-5, automatic), libquicktime2:amd64 (1.2.4-dmo11, automatic), liblavplay-2.1-0:amd64 (2.1.0-dmo6, automatic), liblavfile-2.1-0:amd64 (2.1.0-dmo6, automatic), transcode:amd64 (1.1.7-dmo11), libmplex2-2.1-0:amd64 (2.1.0-dmo6, automatic), transcode-doc:amd64 (1.1.7-dmo11, automatic), libmpeg2encpp-2.1-0:amd64 (2.1.0-dmo6, automatic)
End-Date: 2015-09-21  19:26:07

Start-Date: 2015-09-21  19:27:14
Commandline: /usr/sbin/synaptic
Purge: transcode:amd64 (1.1.7-dmo11)
End-Date: 2015-09-21  19:27:16

Start-Date: 2015-09-21  19:29:54
Commandline: /usr/sbin/synaptic
Remove: mjpegtools:amd64 (2.1.0-dmo6), liblavplay-2.1-0:amd64 (2.1.0-dmo6), libmplex2-2.1-0:amd64 (2.1.0-dmo6), libmpeg2encpp-2.1-0:amd64 (2.1.0-dmo6)
Purge: liblavjpeg-2.1-0:amd64 (2.1.0-dmo6), twolame:amd64 (0.3.13-1.1), libmjpegutils-2.1-0:amd64 (2.1.0-dmo6), sox:amd64 (14.4.1-5), libquicktime2:amd64 (1.2.4-dmo11), liblavfile-2.1-0:amd64 (2.1.0-dmo6)
End-Date: 2015-09-21  19:30:04

Start-Date: 2015-09-21  19:30:35
Commandline: /usr/sbin/synaptic
Purge: liblavplay-2.1-0:amd64 (), libmplex2-2.1-0:amd64 (), libmpeg2encpp-2.1-0:amd64 ()
End-Date: 2015-09-21  19:30:36

Start-Date: 2015-09-21  22:03:30
Commandline: /usr/sbin/synaptic
Install: libdvdcss-dev:amd64 (1.3.0-dmo1)
End-Date: 2015-09-21  22:03:37

Start-Date: 2015-09-21  22:05:56
Commandline: /usr/sbin/synaptic
Upgrade: linux-image-3.16.0-4-amd64:amd64 (3.16.7-ckt11-1+deb8u3, 3.16.7-ckt11-1+deb8u4), linux-libc-dev:amd64 (3.16.7-ckt11-1+deb8u3, 3.16.7-ckt11-1+deb8u4)
End-Date: 2015-09-21  22:06:38

Start-Date: 2015-09-21  22:30:04
Commandline: /usr/sbin/synaptic
Purge: xfburn:amd64 (0.5.2-1)
End-Date: 2015-09-21  22:30:09

Start-Date: 2015-09-21  22:31:00
Commandline: /usr/sbin/synaptic
Remove: libexo-1-0:amd64 (0.10.2-4)
Purge: libexo-common:amd64 (0.10.2-4), libexo-helpers:amd64 (0.10.2-4)
End-Date: 2015-09-21  22:31:03

Start-Date: 2015-09-21  22:31:36
Commandline: /usr/sbin/synaptic
Purge: libexo-1-0:amd64 ()
End-Date: 2015-09-21  22:31:36

Start-Date: 2015-09-24  15:04:26
Upgrade: rpcbind:amd64 (0.2.1-6, 0.2.1-6+deb8u1)
End-Date: 2015-09-24  15:04:36

Start-Date: 2015-09-25  19:11:24
Upgrade: libsasl2-modules-db:amd64 (2.1.26.dfsg1-13, 2.1.26.dfsg1-13+deb8u1), libsasl2-modules:amd64 (2.1.26.dfsg1-13, 2.1.26.dfsg1-13+deb8u1), libsasl2-2:amd64 (2.1.26.dfsg1-13, 2.1.26.dfsg1-13+deb8u1)
End-Date: 2015-09-25  19:11:32

Start-Date: 2015-10-05  15:17:58
Upgrade: handbrake:amd64 (0.10.1-dmo3, 0.10.1-dmo3+1), handbrake-gtk:amd64 (0.10.1-dmo3, 0.10.1-dmo3+1)
End-Date: 2015-10-05  15:18:07

Start-Date: 2015-10-07  08:00:13
Upgrade: libfreetype6:amd64 (2.5.2-3, 2.5.2-3+deb8u1)
End-Date: 2015-10-07  08:00:20

Start-Date: 2015-10-07  12:51:52
Commandline: /usr/sbin/synaptic
Install: vpx-tools:amd64 (1.3.0-3)
End-Date: 2015-10-07  12:51:58

Start-Date: 2015-10-11  18:01:52
Upgrade: firmware-realtek:amd64 (0.43, 0.44~bpo8+1)
End-Date: 2015-10-11  18:02:09

Start-Date: 2015-10-13  15:07:24
Upgrade: linux-image-3.16.0-4-amd64:amd64 (3.16.7-ckt11-1+deb8u4, 3.16.7-ckt11-1+deb8u5), linux-libc-dev:amd64 (3.16.7-ckt11-1+deb8u4, 3.16.7-ckt11-1+deb8u5)
End-Date: 2015-10-13  15:08:04

Start-Date: 2015-10-19  16:38:36
Upgrade: tzdata:amd64 (2015f-0+deb8u1, 2015g-0+deb8u1)
End-Date: 2015-10-19  16:38:49

Start-Date: 2015-10-21  17:03:53
Upgrade: chromium-l10n:amd64 (45.0.2454.85-1~deb8u1, 46.0.2490.71-1~deb8u1), chromium:amd64 (45.0.2454.85-1~deb8u1, 46.0.2490.71-1~deb8u1)
End-Date: 2015-10-21  17:04:42

Start-Date: 2015-10-22  18:29:58
Commandline: /usr/sbin/synaptic
Install: fwbuilder-doc:amd64 (5.1.0-4, automatic), fwbuilder-common:amd64 (5.1.0-4, automatic), fwbuilder:amd64 (5.1.0-4), libsnmp-base:amd64 (5.7.2.1+dfsg-1, automatic), rcs:amd64 (5.9.3-1, automatic), libsnmp30:amd64 (5.7.2.1+dfsg-1, automatic)
End-Date: 2015-10-22  18:30:48

Start-Date: 2015-10-22  18:38:05
Commandline: /usr/sbin/synaptic
Purge: fwbuilder-doc:amd64 (5.1.0-4), fwbuilder-common:amd64 (5.1.0-4), fwbuilder:amd64 (5.1.0-4)
End-Date: 2015-10-22  18:38:40

cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13 :p roxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-timesync:x:100:103:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:101:104:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:102:105:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:103:106:systemd Bus Proxy,,,:/run/systemd:/bin/false
Debian-exim:x:104:109::/var/spool/exim4:/bin/false
messagebus:x:105:110::/var/run/dbus:/bin/false
statd:x:106:65534::/var/lib/nfs:/bin/false
pawel:x:1000:1000:Pawel,,,:/home/pawel:/bin/bash
avahi:x:107:114:Avahi mDNS daemon,,,:/var/run/avahi-daemon:/bin/false
colord:x:108:116:colord colour management daemon,,,:/var/lib/colord:/bin/false
geoclue:x:109:117::/var/lib/geoclue:/bin/false
pulse:x:110:118:PulseAudio daemon,,,:/var/run/pulse:/bin/false
rtkit:x:111:120:RealtimeKit,,,:/proc:/bin/false
saned:x:112:121::/var/lib/saned:/bin/false
usbmux:x:113:46:usbmux daemon,,,:/var/lib/usbmux:/bin/false
lightdm:x:114:122:Light Display Manager:/var/lib/lightdm:/bin/false
dnsmasq:x:115:65534:dnsmasq,,,:/var/lib/misc:/bin/false

stat /etc/passwd
  Plik: „/etc/passwd”
  rozmiar: 1921          bloków: 8          bloki I/O: 4096   zwykły plik
Urządzenie: 802h/2050d    inody: 13633325    dowiązań: 1
Dostęp: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
Dostęp:      2015-10-22 17:05:37.708973389 +0200
Modyfikacja: 2015-04-27 17:21:31.581303491 +0200
Zmiana:      2015-04-27 17:21:31.617303490 +0200
Utworzenie:  -
Awatar użytkownika
szelma
Beginner
Posty: 185
Rejestracja: 02 sierpnia 2014, 10:45

Post autor: szelma »

manco77 spójrz na sygnaturę moderatora marcin1982 ,jest tam napisane jak używać znaczników "code" i wrzuć te logi w tagi code,bo ciągną się cała stronę :/
Przepraszam panowie administratorzy i moderatorzy,zboczenie zawodowe ;)
Awatar użytkownika
marcin1982
Moderator
Posty: 1730
Rejestracja: 05 maja 2011, 12:59
Lokalizacja: Zagłębie Dąbrowskie

Post autor: marcin1982 »

szelma
Na przyszłość skorzystaj z opcji "Raportowanie postu".
ODPOWIEDZ