wirus czy w
wirus czy włamanie ?
witam
wczoraj miałem dziwny przypadek na Debianie 8.2 sluchalem muzyki na programie audacious w pewnym momencie program oszalał nie dało się nic z nim zrobić po czym odtworzyło się okienko logowania do synaptica i ktoś kilku krotnie próbował wpisać hasło roota po zresetowaniu Debiana wszystko wróciło do normy czy Debian zapisuje takie sytuacje da się ustalić co to było
wczoraj miałem dziwny przypadek na Debianie 8.2 sluchalem muzyki na programie audacious w pewnym momencie program oszalał nie dało się nic z nim zrobić po czym odtworzyło się okienko logowania do synaptica i ktoś kilku krotnie próbował wpisać hasło roota po zresetowaniu Debiana wszystko wróciło do normy czy Debian zapisuje takie sytuacje da się ustalić co to było
-
- Beginner
- Posty: 257
- Rejestracja: 14 maja 2013, 17:18
pokaz
Kod: Zaznacz cały
iptables -L
- marcin1982
- Moderator
- Posty: 1731
- Rejestracja: 05 maja 2011, 12:59
- Lokalizacja: Zagłębie Dąbrowskie
Podaj wynik poleceń:
Kod: Zaznacz cały
cat /var/log/auth.log
Kod: Zaznacz cały
tail -n 100 /var/log/apt/history.log
Kod: Zaznacz cały
w
Kod: Zaznacz cały
cat /etc/passwd
Kod: Zaznacz cały
stat /etc/passwd
Kod: Zaznacz cały
iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
ufw-before-logging-input all -- anywhere anywhere
ufw-before-input all -- anywhere anywhere
ufw-after-input all -- anywhere anywhere
ufw-after-logging-input all -- anywhere anywhere
ufw-reject-input all -- anywhere anywhere
ufw-track-input all -- anywhere anywhere
Chain FORWARD (policy DROP)
target prot opt source destination
ufw-before-logging-forward all -- anywhere anywhere
ufw-before-forward all -- anywhere anywhere
ufw-after-forward all -- anywhere anywhere
ufw-after-logging-forward all -- anywhere anywhere
ufw-reject-forward all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ufw-before-logging-output all -- anywhere anywhere
ufw-before-output all -- anywhere anywhere
ufw-after-output all -- anywhere anywhere
ufw-after-logging-output all -- anywhere anywhere
ufw-reject-output all -- anywhere anywhere
ufw-track-output all -- anywhere anywhere
Chain ufw-after-forward (1 references)
target prot opt source destination
Chain ufw-after-input (1 references)
target prot opt source destination
ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns
ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm
ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn
ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds
ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps
ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc
ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
Chain ufw-after-logging-forward (1 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
Chain ufw-after-logging-input (1 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
Chain ufw-after-logging-output (1 references)
target prot opt source destination
Chain ufw-after-output (1 references)
target prot opt source destination
Chain ufw-before-forward (1 references)
target prot opt source destination
ufw-user-forward all -- anywhere anywhere
Chain ufw-before-input (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ufw-logging-deny all -- anywhere anywhere state INVALID
DROP all -- anywhere anywhere state INVALID
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp source-quench
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp parameter-problem
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
ufw-not-local all -- anywhere anywhere
ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900
ufw-user-input all -- anywhere anywhere
Chain ufw-before-logging-forward (1 references)
target prot opt source destination
Chain ufw-before-logging-input (1 references)
target prot opt source destination
Chain ufw-before-logging-output (1 references)
target prot opt source destination
Chain ufw-before-output (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ufw-user-output all -- anywhere anywhere
Chain ufw-logging-allow (0 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "
Chain ufw-logging-deny (2 references)
target prot opt source destination
RETURN all -- anywhere anywhere state INVALID limit: avg 3/min burst 10
LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "
Chain ufw-not-local (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST
RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10
DROP all -- anywhere anywhere
Chain ufw-reject-forward (1 references)
target prot opt source destination
Chain ufw-reject-input (1 references)
target prot opt source destination
Chain ufw-reject-output (1 references)
target prot opt source destination
Chain ufw-skip-to-policy-forward (0 references)
target prot opt source destination
DROP all -- anywhere anywhere
Chain ufw-skip-to-policy-input (7 references)
target prot opt source destination
DROP all -- anywhere anywhere
Chain ufw-skip-to-policy-output (0 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
Chain ufw-track-input (1 references)
target prot opt source destination
Chain ufw-track-output (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere state NEW
ACCEPT udp -- anywhere anywhere state NEW
Chain ufw-user-forward (1 references)
target prot opt source destination
Chain ufw-user-input (1 references)
target prot opt source destination
Chain ufw-user-limit (0 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain ufw-user-limit-accept (0 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
Chain ufw-user-logging-forward (0 references)
target prot opt source destination
Chain ufw-user-logging-input (0 references)
target prot opt source destination
Chain ufw-user-logging-output (0 references)
target prot opt source destination
Chain ufw-user-output (1 references)
target prot opt source
[B]cat /var/log/auth.log
_[/B]format.py -d /dev/sdb -f fat32 -l USB Stick -u 1000 -g 1000]
Oct 19 09:33:33 debian-64 su[1489]: Successful su for root by pawel
Oct 19 09:33:33 debian-64 su[1489]: + /dev/pts/0 pawel:root
Oct 19 09:33:33 debian-64 su[1489]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 19 09:54:09 debian-64 su[1489]: pam_unix(su:session): session closed for user root
Oct 19 10:17:01 debian-64 CRON[1548]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 10:17:01 debian-64 CRON[1548]: pam_unix(cron:session): session closed for user root
Oct 19 11:17:01 debian-64 CRON[1694]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 11:17:01 debian-64 CRON[1694]: pam_unix(cron:session): session closed for user root
Oct 19 11:34:48 debian-64 systemd-logind[601]: System is powering down.
Oct 19 16:36:33 debian-64 systemd-logind[598]: New seat seat0.
Oct 19 16:36:33 debian-64 systemd-logind[598]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 19 16:36:33 debian-64 systemd-logind[598]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 19 16:36:39 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 19 16:36:39 debian-64 systemd-logind[598]: New session c1 of user lightdm.
Oct 19 16:36:39 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 19 16:37:16 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 19 16:37:16 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 19 16:37:16 debian-64 systemd-logind[598]: New session 1 of user pawel.
Oct 19 16:37:16 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 19 16:37:19 debian-64 gnome-keyring-daemon[1114]: The SSH agent was already initialized
Oct 19 16:37:19 debian-64 gnome-keyring-daemon[1114]: The PKCS#11 component was already initialized
Oct 19 16:37:19 debian-64 gnome-keyring-daemon[1114]: The GPG agent was already initialized
Oct 19 16:37:19 debian-64 gnome-keyring-daemon[1114]: The Secret Service was already initialized
Oct 19 16:37:19 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.22 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 19 16:37:43 debian-64 su[1360]: Successful su for root by pawel
Oct 19 16:37:43 debian-64 su[1360]: + /dev/pts/0 pawel:root
Oct 19 16:37:43 debian-64 su[1360]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 19 16:38:56 debian-64 su[1360]: pam_unix(su:session): session closed for user root
Oct 19 16:49:14 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user :p awel to gain TEMPORARY authorization for action org.freedesktop.policykit.pkexec.run-im for unix-process:1680:76104 [/usr/bin/python2 /usr/lib/mintstick/mintstick.py -m format] (owned by unix-user :p awel)
Oct 19 16:49:14 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 19 16:49:14 debian-64 pkexec[1693]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/bin/python2 -u /usr/lib/mintstick/raw_format.py -d /dev/sdb -f fat32 -l Debian -u 1000 -g 1000]
Oct 19 16:49:33 debian-64 su[1759]: Successful su for root by pawel
Oct 19 16:49:33 debian-64 su[1759]: + /dev/pts/0 pawel:root
Oct 19 16:49:33 debian-64 su[1759]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 19 16:56:39 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user :p awel to gain TEMPORARY authorization for action org.freedesktop.policykit.pkexec.run-im for unix-process:1898:116060 [/usr/bin/python2 /usr/lib/mintstick/mintstick.py -m format] (owned by unix-user :p awel)
Oct 19 16:56:39 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 19 16:56:39 debian-64 pkexec[1970]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/bin/python2 -u /usr/lib/mintstick/raw_format.py -d /dev/sdb -f fat32 -l Debian -u 1000 -g 1000]
Oct 19 17:15:06 debian-64 su[1759]: pam_unix(su:session): session closed for user root
Oct 19 17:17:01 debian-64 CRON[2220]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 17:17:02 debian-64 CRON[2220]: pam_unix(cron:session): session closed for user root
Oct 19 17:17:51 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user :p awel to gain TEMPORARY authorization for action org.freedesktop.policykit.pkexec.run-im for unix-process:2272:247587 [/usr/bin/python2 /usr/lib/mintstick/mintstick.py -m format] (owned by unix-user :p awel)
Oct 19 17:17:51 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 19 17:17:51 debian-64 pkexec[2279]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/bin/python2 -u /usr/lib/mintstick/raw_format.py -d /dev/sdb -f fat32 -l STICK2GB -u 1000 -g 1000]
Oct 19 18:17:01 debian-64 CRON[2436]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 18:17:01 debian-64 CRON[2436]: pam_unix(cron:session): session closed for user root
Oct 19 19:17:01 debian-64 CRON[2482]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 19:17:01 debian-64 CRON[2482]: pam_unix(cron:session): session closed for user root
Oct 19 19:26:30 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user :p awel to gain TEMPORARY authorization for action org.freedesktop.policykit.pkexec.run-im for unix-process:2563:1017837 [/usr/bin/python2 /usr/lib/mintstick/mintstick.py -m format] (owned by unix-user :p awel)
Oct 19 19:26:30 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 19 19:26:30 debian-64 pkexec[2582]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/bin/python2 -u /usr/lib/mintstick/raw_format.py -d /dev/sdb -f fat32 -l raspbian -u 1000 -g 1000]
Oct 19 19:26:50 debian-64 su[2645]: Successful su for root by pawel
Oct 19 19:26:50 debian-64 su[2645]: + /dev/pts/0 pawel:root
Oct 19 19:26:50 debian-64 su[2645]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 19 19:45:34 debian-64 su[2645]: pam_unix(su:session): session closed for user root
Oct 19 20:17:01 debian-64 CRON[2944]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 20:17:01 debian-64 CRON[2944]: pam_unix(cron:session): session closed for user root
Oct 19 21:17:01 debian-64 CRON[3212]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 19 21:17:01 debian-64 CRON[3212]: pam_unix(cron:session): session closed for user root
Oct 19 21:31:28 debian-64 systemd-logind[598]: System is powering down.
Oct 19 21:31:28 debian-64 gnome-keyring-daemon[1114]: g_dbus_connection_real_closed: Remote peer vanished with error: Underlying GIOStream returned 0 bytes on an async read (g-io-error-quark, 0). Exiting.
Oct 20 16:43:47 debian-64 systemd-logind[599]: New seat seat0.
Oct 20 16:43:47 debian-64 systemd-logind[599]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 20 16:43:47 debian-64 systemd-logind[599]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 20 16:43:54 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 20 16:43:54 debian-64 systemd-logind[599]: New session c1 of user lightdm.
Oct 20 16:43:54 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 20 16:44:44 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 20 16:44:44 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 20 16:44:44 debian-64 systemd-logind[599]: New session 1 of user pawel.
Oct 20 16:44:44 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 20 16:44:48 debian-64 gnome-keyring-daemon[1117]: The SSH agent was already initialized
Oct 20 16:44:48 debian-64 gnome-keyring-daemon[1117]: The PKCS#11 component was already initialized
Oct 20 16:44:49 debian-64 gnome-keyring-daemon[1117]: The GPG agent was already initialized
Oct 20 16:44:49 debian-64 gnome-keyring-daemon[1117]: The Secret Service was already initialized
Oct 20 16:44:49 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.24 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 20 16:48:30 debian-64 su[1479]: Successful su for root by pawel
Oct 20 16:48:30 debian-64 su[1479]: + /dev/pts/0 pawel:root
Oct 20 16:48:30 debian-64 su[1479]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 20 16:49:39 debian-64 su[1479]: pam_unix(su:session): session closed for user root
Oct 20 17:17:02 debian-64 CRON[1937]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 20 17:17:02 debian-64 CRON[1937]: pam_unix(cron:session): session closed for user root
Oct 20 18:17:01 debian-64 CRON[1970]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 20 18:17:02 debian-64 CRON[1970]: pam_unix(cron:session): session closed for user root
Oct 20 19:17:01 debian-64 CRON[2005]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 20 19:17:01 debian-64 CRON[2005]: pam_unix(cron:session): session closed for user root
Oct 20 20:17:01 debian-64 CRON[2250]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 20 20:17:01 debian-64 CRON[2250]: pam_unix(cron:session): session closed for user root
Oct 20 21:17:02 debian-64 CRON[3770]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 20 21:17:02 debian-64 CRON[3770]: pam_unix(cron:session): session closed for user root
Oct 20 21:26:45 debian-64 systemd-logind[599]: System is powering down.
Oct 21 17:01:14 debian-64 systemd-logind[599]: New seat seat0.
Oct 21 17:01:14 debian-64 systemd-logind[599]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 21 17:01:14 debian-64 systemd-logind[599]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 21 17:01:19 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 21 17:01:19 debian-64 systemd-logind[599]: New session c1 of user lightdm.
Oct 21 17:01:19 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 21 17:01:52 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 21 17:01:52 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 21 17:01:52 debian-64 systemd-logind[599]: New session 1 of user pawel.
Oct 21 17:01:52 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 21 17:01:56 debian-64 gnome-keyring-daemon[1168]: The SSH agent was already initialized
Oct 21 17:01:56 debian-64 gnome-keyring-daemon[1168]: The PKCS#11 component was already initialized
Oct 21 17:01:57 debian-64 gnome-keyring-daemon[1168]: The GPG agent was already initialized
Oct 21 17:01:57 debian-64 gnome-keyring-daemon[1168]: The Secret Service was already initialized
Oct 21 17:01:57 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.24 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 21 17:02:22 debian-64 su[1413]: pam_unix(su:auth): authentication failure; logname=pawel uid=1000 euid=0 tty=/dev/pts/0 ruser=pawel rhost= user=root
Oct 21 17:02:24 debian-64 su[1413]: pam_authenticate: Authentication failure
Oct 21 17:02:24 debian-64 su[1413]: FAILED su for root by pawel
Oct 21 17:02:24 debian-64 su[1413]: - /dev/pts/0 pawel:root
Oct 21 17:02:30 debian-64 su[1414]: Successful su for root by pawel
Oct 21 17:02:30 debian-64 su[1414]: + /dev/pts/0 pawel:root
Oct 21 17:02:30 debian-64 su[1414]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 21 17:04:48 debian-64 su[1414]: pam_unix(su:session): session closed for user root
Oct 21 17:17:01 debian-64 CRON[25778]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 21 17:17:01 debian-64 CRON[25778]: pam_unix(cron:session): session closed for user root
Oct 21 17:20:25 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:25799:116338 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 21 17:20:25 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 21 17:20:25 debian-64 pkexec[25801]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 21 18:17:02 debian-64 CRON[26219]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 21 18:17:02 debian-64 CRON[26219]: pam_unix(cron:session): session closed for user root
Oct 21 19:17:02 debian-64 CRON[26245]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 21 19:17:02 debian-64 CRON[26245]: pam_unix(cron:session): session closed for user root
Oct 21 20:08:17 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user :p awel to gain TEMPORARY authorization for action org.freedesktop.policykit.pkexec.run-im for unix-process:26457:1121393 [/usr/bin/python2 /usr/lib/mintstick/mintstick.py -m format] (owned by unix-user :p awel)
Oct 21 20:08:17 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 21 20:08:17 debian-64 pkexec[26468]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/bin/python2 -u /usr/lib/mintstick/raw_format.py -d /dev/sdb -f fat32 -l MP3-AUDIO -u 1000 -g 1000]
Oct 21 20:17:01 debian-64 CRON[27663]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 21 20:17:01 debian-64 CRON[27663]: pam_unix(cron:session): session closed for user root
Oct 21 21:01:54 debian-64 polkitd(authority=local): Operator of unix-session:1 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.synaptic for unix-process:30615:1445283 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 21 21:01:54 debian-64 pkexec[30616]: pawel: Error executing command as another user: Not authorized [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 21 21:01:56 debian-64 polkitd(authority=local): Operator of unix-session:1 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.synaptic for unix-process:30618:1445286 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 21 21:01:56 debian-64 pkexec[30619]: pawel: Error executing command as another user: Not authorized [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 21 21:01:58 debian-64 polkitd(authority=local): Operator of unix-session:1 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.synaptic for unix-process:30624:1445289 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 21 21:01:58 debian-64 pkexec[30625]: pawel: Error executing command as another user: Not authorized [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 21 21:02:00 debian-64 polkitd(authority=local): Operator of unix-session:1 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.synaptic for unix-process:30611:1445281 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 21 21:02:00 debian-64 pkexec[30612]: pawel: Error executing command as another user: Not authorized [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 21 21:02:01 debian-64 polkit-agent-helper-1[30704]: pam_unix(polkit-1:auth): authentication failure; logname= uid=1000 euid=0 tty= ruser=root rhost= user=root
Oct 21 21:02:04 debian-64 polkit-agent-helper-1[30705]: pam_unix(polkit-1:auth): authentication failure; logname= uid=1000 euid=0 tty= ruser=root rhost= user=root
Oct 21 21:02:16 debian-64 systemd-logind[599]: System is rebooting.
Oct 21 21:02:58 debian-64 systemd-logind[602]: New seat seat0.
Oct 21 21:02:58 debian-64 systemd-logind[602]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 21 21:02:58 debian-64 systemd-logind[602]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 21 21:03:04 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 21 21:03:04 debian-64 systemd-logind[602]: New session c1 of user lightdm.
Oct 21 21:03:04 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 21 21:03:14 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 21 21:03:14 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 21 21:03:14 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 21 21:03:14 debian-64 systemd-logind[602]: New session 1 of user pawel.
Oct 21 21:03:18 debian-64 gnome-keyring-daemon[1118]: The SSH agent was already initialized
Oct 21 21:03:18 debian-64 gnome-keyring-daemon[1118]: The PKCS#11 component was already initialized
Oct 21 21:03:18 debian-64 gnome-keyring-daemon[1118]: The GPG agent was already initialized
Oct 21 21:03:18 debian-64 gnome-keyring-daemon[1118]: The Secret Service was already initialized
Oct 21 21:03:19 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.24 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 21 21:04:46 debian-64 systemd-logind[602]: System is powering down.
Oct 22 17:05:47 debian-64 systemd-logind[600]: New seat seat0.
Oct 22 17:05:47 debian-64 systemd-logind[600]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 22 17:05:47 debian-64 systemd-logind[600]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 22 17:05:51 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 22 17:05:51 debian-64 systemd-logind[600]: New session c1 of user lightdm.
Oct 22 17:05:51 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 22 17:06:01 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 22 17:06:01 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 22 17:06:01 debian-64 systemd-logind[600]: New session 1 of user pawel.
Oct 22 17:06:01 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 22 17:06:05 debian-64 gnome-keyring-daemon[1168]: The SSH agent was already initialized
Oct 22 17:06:05 debian-64 gnome-keyring-daemon[1168]: The PKCS#11 component was already initialized
Oct 22 17:06:05 debian-64 gnome-keyring-daemon[1168]: The GPG agent was already initialized
Oct 22 17:06:05 debian-64 gnome-keyring-daemon[1168]: The Secret Service was already initialized
Oct 22 17:06:05 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.22 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 22 17:06:44 debian-64 su[1498]: Successful su for root by pawel
Oct 22 17:06:44 debian-64 su[1498]: + /dev/pts/0 pawel:root
Oct 22 17:06:44 debian-64 su[1498]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 17:10:23 debian-64 su[1498]: pam_unix(su:session): session closed for user root
Oct 22 17:17:01 debian-64 CRON[1632]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 17:17:01 debian-64 CRON[1632]: pam_unix(cron:session): session closed for user root
Oct 22 18:15:06 debian-64 su[2086]: Successful su for root by pawel
Oct 22 18:15:06 debian-64 su[2086]: + /dev/pts/0 pawel:root
Oct 22 18:15:06 debian-64 su[2086]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 18:17:01 debian-64 CRON[2130]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 18:17:01 debian-64 CRON[2130]: pam_unix(cron:session): session closed for user root
Oct 22 18:27:45 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:6260:492901 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 22 18:27:45 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 22 18:27:45 debian-64 pkexec[6261]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 22 18:30:02 debian-64 su[2086]: pam_unix(su:session): session closed for user root
Oct 22 18:34:39 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:7008:534415 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 22 18:34:39 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 22 18:34:39 debian-64 pkexec[7010]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 22 18:37:27 debian-64 polkitd(authority=local): Operator of unix-session:1 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:7038:551056 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user :p awel)
Oct 22 18:37:27 debian-64 pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Oct 22 18:37:27 debian-64 pkexec[7040]: pawel: Executing command [USER=root] [TTY=unknown] [CWD=/home/pawel] [COMMAND=/usr/sbin/synaptic]
Oct 22 18:38:59 debian-64 su[7407]: Successful su for root by pawel
Oct 22 18:38:59 debian-64 su[7407]: + /dev/pts/0 pawel:root
Oct 22 18:38:59 debian-64 su[7407]: pam_unix(su:session): session opened for user root by (uid=1000)
Oct 22 18:39:10 debian-64 su[7407]: pam_unix(su:session): session closed for user root
Oct 22 18:39:23 debian-64 su[7497]: Successful su for root by pawel
Oct 22 18:39:23 debian-64 su[7497]: + /dev/pts/0 pawel:root
Oct 22 18:39:23 debian-64 su[7497]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 18:49:16 debian-64 su[7497]: pam_unix(su:session): session closed for user root
Oct 22 18:52:59 debian-64 su[9980]: Successful su for root by pawel
Oct 22 18:52:59 debian-64 su[9980]: + /dev/pts/0 pawel:root
Oct 22 18:52:59 debian-64 su[9980]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 19:05:31 debian-64 gnome-keyring-daemon[1168]: g_dbus_connection_real_closed: Remote peer vanished with error: Underlying GIOStream returned 0 bytes on an async read (g-io-error-quark, 0). Exiting.
Oct 22 19:05:31 debian-64 polkitd(authority=local): Unregistered Authentication Agent for unix-session:1 (system bus name :1.22, object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8) (disconnected from bus)
Oct 22 19:06:03 debian-64 systemd-logind[606]: New seat seat0.
Oct 22 19:06:03 debian-64 systemd-logind[606]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 22 19:06:03 debian-64 systemd-logind[606]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 22 19:06:08 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 22 19:06:08 debian-64 systemd-logind[606]: New session c1 of user lightdm.
Oct 22 19:06:08 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 22 19:06:18 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 22 19:06:18 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 22 19:06:18 debian-64 systemd-logind[606]: New session 1 of user pawel.
Oct 22 19:06:18 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 22 19:06:22 debian-64 gnome-keyring-daemon[1166]: The SSH agent was already initialized
Oct 22 19:06:22 debian-64 gnome-keyring-daemon[1166]: The PKCS#11 component was already initialized
Oct 22 19:06:22 debian-64 gnome-keyring-daemon[1166]: The GPG agent was already initialized
Oct 22 19:06:22 debian-64 gnome-keyring-daemon[1166]: The Secret Service was already initialized
Oct 22 19:06:22 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.22 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 22 19:06:43 debian-64 su[1412]: Successful su for root by pawel
Oct 22 19:06:43 debian-64 su[1412]: + /dev/pts/0 pawel:root
Oct 22 19:06:43 debian-64 su[1412]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 19:06:57 debian-64 su[1412]: pam_unix(su:session): session closed for user root
Oct 22 19:08:03 debian-64 su[1489]: Successful su for root by pawel
Oct 22 19:08:03 debian-64 su[1489]: + /dev/pts/0 pawel:root
Oct 22 19:08:03 debian-64 su[1489]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
Oct 22 19:08:58 debian-64 su[1489]: pam_unix(su:session): session closed for user root
Oct 22 19:17:03 debian-64 CRON[2341]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 19:17:04 debian-64 CRON[2341]: pam_unix(cron:session): session closed for user root
Oct 22 20:17:01 debian-64 CRON[2564]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 20:17:01 debian-64 CRON[2564]: pam_unix(cron:session): session closed for user root
Oct 22 21:12:54 debian-64 systemd-logind[606]: System is powering down.
Oct 22 21:12:56 debian-64 gnome-keyring-daemon[1166]: g_dbus_connection_real_closed: Remote peer vanished with error: Underlying GIOStream returned 0 bytes on an async read (g-io-error-quark, 0). Exiting.
Oct 22 21:12:56 debian-64 polkitd(authority=local): Unregistered Authentication Agent for unix-session:1 (system bus name :1.22, object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8) (disconnected from bus)
Oct 23 12:24:45 debian-64 systemd-logind[605]: New seat seat0.
Oct 23 12:24:45 debian-64 systemd-logind[605]: Watching system buttons on /dev/input/event4 (Power Button)
Oct 23 12:24:45 debian-64 systemd-logind[605]: Watching system buttons on /dev/input/event3 (Power Button)
Oct 23 12:24:51 debian-64 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Oct 23 12:24:51 debian-64 systemd-logind[605]: New session c1 of user lightdm.
Oct 23 12:24:51 debian-64 systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Oct 23 12:25:00 debian-64 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 23 12:25:00 debian-64 lightdm: pam_unix(lightdm:session): session opened for user pawel by (uid=0)
Oct 23 12:25:00 debian-64 systemd: pam_unix(systemd-user:session): session opened for user pawel by (uid=0)
Oct 23 12:25:00 debian-64 systemd-logind[605]: New session 1 of user pawel.
Oct 23 12:25:04 debian-64 gnome-keyring-daemon[1156]: The SSH agent was already initialized
Oct 23 12:25:04 debian-64 gnome-keyring-daemon[1156]: The PKCS#11 component was already initialized
Oct 23 12:25:05 debian-64 gnome-keyring-daemon[1156]: The GPG agent was already initialized
Oct 23 12:25:05 debian-64 gnome-keyring-daemon[1156]: The Secret Service was already initialized
Oct 23 12:25:05 debian-64 polkitd(authority=local): Registered Authentication Agent for unix-session:1 (system bus name :1.24 [/usr/lib/x86_64-linux-gnu/polkit-mate/polkit-mate-authentication-agent-1], object path /org/mate/PolicyKit1/AuthenticationAgent, locale pl_PL.UTF-8)
Oct 23 12:25:30 debian-64 su[1444]: pam_unix(su:auth): authentication failure; logname=pawel uid=1000 euid=0 tty=/dev/pts/0 ruser=pawel rhost= user=root
Oct 23 12:25:32 debian-64 su[1444]: pam_authenticate: Authentication failure
Oct 23 12:25:32 debian-64 su[1444]: FAILED su for root by pawel
Oct 23 12:25:32 debian-64 su[1444]: - /dev/pts/0 pawel:root
Oct 23 12:25:37 debian-64 su[1474]: Successful su for root by pawel
Oct 23 12:25:37 debian-64 su[1474]: + /dev/pts/0 pawel:root
Oct 23 12:25:37 debian-64 su[1474]: pam_unix(su:session): session opened for user root by pawel(uid=1000)
root@debian-64:/home/pawel/Pulpit#
tail -n 100 /var/log/apt/history.log
Start-Date: 2015-09-21 19:23:05
Commandline: /usr/sbin/synaptic
Install: libmediaart-1.0-0:amd64 (0.7.0-2, automatic), libnautilus-extension1a:amd64 (3.14.1-2, automatic), libtracker-sparql-1.0-0:amd64 (1.2.4-2, automatic), brasero:amd64 (3.11.4-1.1), libiptcdata0:amd64 (1.0.4-4, automatic)
End-Date: 2015-09-21 19:23:49
Start-Date: 2015-09-21 19:25:49
Commandline: /usr/sbin/synaptic
Install: gawk:amd64 (4.1.1+dfsg-1, automatic), liblavjpeg-2.1-0:amd64 (2.1.0-dmo6, automatic), twolame:amd64 (0.3.13-1.1, automatic), mjpegtools:amd64 (2.1.0-dmo6, automatic), libmjpegutils-2.1-0:amd64 (2.1.0-dmo6, automatic), sox:amd64 (14.4.1-5, automatic), libquicktime2:amd64 (1.2.4-dmo11, automatic), liblavplay-2.1-0:amd64 (2.1.0-dmo6, automatic), liblavfile-2.1-0:amd64 (2.1.0-dmo6, automatic), transcode:amd64 (1.1.7-dmo11), libmplex2-2.1-0:amd64 (2.1.0-dmo6, automatic), transcode-doc:amd64 (1.1.7-dmo11, automatic), libmpeg2encpp-2.1-0:amd64 (2.1.0-dmo6, automatic)
End-Date: 2015-09-21 19:26:07
Start-Date: 2015-09-21 19:27:14
Commandline: /usr/sbin/synaptic
Purge: transcode:amd64 (1.1.7-dmo11)
End-Date: 2015-09-21 19:27:16
Start-Date: 2015-09-21 19:29:54
Commandline: /usr/sbin/synaptic
Remove: mjpegtools:amd64 (2.1.0-dmo6), liblavplay-2.1-0:amd64 (2.1.0-dmo6), libmplex2-2.1-0:amd64 (2.1.0-dmo6), libmpeg2encpp-2.1-0:amd64 (2.1.0-dmo6)
Purge: liblavjpeg-2.1-0:amd64 (2.1.0-dmo6), twolame:amd64 (0.3.13-1.1), libmjpegutils-2.1-0:amd64 (2.1.0-dmo6), sox:amd64 (14.4.1-5), libquicktime2:amd64 (1.2.4-dmo11), liblavfile-2.1-0:amd64 (2.1.0-dmo6)
End-Date: 2015-09-21 19:30:04
Start-Date: 2015-09-21 19:30:35
Commandline: /usr/sbin/synaptic
Purge: liblavplay-2.1-0:amd64 (), libmplex2-2.1-0:amd64 (), libmpeg2encpp-2.1-0:amd64 ()
End-Date: 2015-09-21 19:30:36
Start-Date: 2015-09-21 22:03:30
Commandline: /usr/sbin/synaptic
Install: libdvdcss-dev:amd64 (1.3.0-dmo1)
End-Date: 2015-09-21 22:03:37
Start-Date: 2015-09-21 22:05:56
Commandline: /usr/sbin/synaptic
Upgrade: linux-image-3.16.0-4-amd64:amd64 (3.16.7-ckt11-1+deb8u3, 3.16.7-ckt11-1+deb8u4), linux-libc-dev:amd64 (3.16.7-ckt11-1+deb8u3, 3.16.7-ckt11-1+deb8u4)
End-Date: 2015-09-21 22:06:38
Start-Date: 2015-09-21 22:30:04
Commandline: /usr/sbin/synaptic
Purge: xfburn:amd64 (0.5.2-1)
End-Date: 2015-09-21 22:30:09
Start-Date: 2015-09-21 22:31:00
Commandline: /usr/sbin/synaptic
Remove: libexo-1-0:amd64 (0.10.2-4)
Purge: libexo-common:amd64 (0.10.2-4), libexo-helpers:amd64 (0.10.2-4)
End-Date: 2015-09-21 22:31:03
Start-Date: 2015-09-21 22:31:36
Commandline: /usr/sbin/synaptic
Purge: libexo-1-0:amd64 ()
End-Date: 2015-09-21 22:31:36
Start-Date: 2015-09-24 15:04:26
Upgrade: rpcbind:amd64 (0.2.1-6, 0.2.1-6+deb8u1)
End-Date: 2015-09-24 15:04:36
Start-Date: 2015-09-25 19:11:24
Upgrade: libsasl2-modules-db:amd64 (2.1.26.dfsg1-13, 2.1.26.dfsg1-13+deb8u1), libsasl2-modules:amd64 (2.1.26.dfsg1-13, 2.1.26.dfsg1-13+deb8u1), libsasl2-2:amd64 (2.1.26.dfsg1-13, 2.1.26.dfsg1-13+deb8u1)
End-Date: 2015-09-25 19:11:32
Start-Date: 2015-10-05 15:17:58
Upgrade: handbrake:amd64 (0.10.1-dmo3, 0.10.1-dmo3+1), handbrake-gtk:amd64 (0.10.1-dmo3, 0.10.1-dmo3+1)
End-Date: 2015-10-05 15:18:07
Start-Date: 2015-10-07 08:00:13
Upgrade: libfreetype6:amd64 (2.5.2-3, 2.5.2-3+deb8u1)
End-Date: 2015-10-07 08:00:20
Start-Date: 2015-10-07 12:51:52
Commandline: /usr/sbin/synaptic
Install: vpx-tools:amd64 (1.3.0-3)
End-Date: 2015-10-07 12:51:58
Start-Date: 2015-10-11 18:01:52
Upgrade: firmware-realtek:amd64 (0.43, 0.44~bpo8+1)
End-Date: 2015-10-11 18:02:09
Start-Date: 2015-10-13 15:07:24
Upgrade: linux-image-3.16.0-4-amd64:amd64 (3.16.7-ckt11-1+deb8u4, 3.16.7-ckt11-1+deb8u5), linux-libc-dev:amd64 (3.16.7-ckt11-1+deb8u4, 3.16.7-ckt11-1+deb8u5)
End-Date: 2015-10-13 15:08:04
Start-Date: 2015-10-19 16:38:36
Upgrade: tzdata:amd64 (2015f-0+deb8u1, 2015g-0+deb8u1)
End-Date: 2015-10-19 16:38:49
Start-Date: 2015-10-21 17:03:53
Upgrade: chromium-l10n:amd64 (45.0.2454.85-1~deb8u1, 46.0.2490.71-1~deb8u1), chromium:amd64 (45.0.2454.85-1~deb8u1, 46.0.2490.71-1~deb8u1)
End-Date: 2015-10-21 17:04:42
Start-Date: 2015-10-22 18:29:58
Commandline: /usr/sbin/synaptic
Install: fwbuilder-doc:amd64 (5.1.0-4, automatic), fwbuilder-common:amd64 (5.1.0-4, automatic), fwbuilder:amd64 (5.1.0-4), libsnmp-base:amd64 (5.7.2.1+dfsg-1, automatic), rcs:amd64 (5.9.3-1, automatic), libsnmp30:amd64 (5.7.2.1+dfsg-1, automatic)
End-Date: 2015-10-22 18:30:48
Start-Date: 2015-10-22 18:38:05
Commandline: /usr/sbin/synaptic
Purge: fwbuilder-doc:amd64 (5.1.0-4), fwbuilder-common:amd64 (5.1.0-4), fwbuilder:amd64 (5.1.0-4)
End-Date: 2015-10-22 18:38:40
cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13 :p roxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-timesync:x:100:103:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:101:104:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:102:105:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:103:106:systemd Bus Proxy,,,:/run/systemd:/bin/false
Debian-exim:x:104:109::/var/spool/exim4:/bin/false
messagebus:x:105:110::/var/run/dbus:/bin/false
statd:x:106:65534::/var/lib/nfs:/bin/false
pawel:x:1000:1000:Pawel,,,:/home/pawel:/bin/bash
avahi:x:107:114:Avahi mDNS daemon,,,:/var/run/avahi-daemon:/bin/false
colord:x:108:116:colord colour management daemon,,,:/var/lib/colord:/bin/false
geoclue:x:109:117::/var/lib/geoclue:/bin/false
pulse:x:110:118:PulseAudio daemon,,,:/var/run/pulse:/bin/false
rtkit:x:111:120:RealtimeKit,,,:/proc:/bin/false
saned:x:112:121::/var/lib/saned:/bin/false
usbmux:x:113:46:usbmux daemon,,,:/var/lib/usbmux:/bin/false
lightdm:x:114:122:Light Display Manager:/var/lib/lightdm:/bin/false
dnsmasq:x:115:65534:dnsmasq,,,:/var/lib/misc:/bin/false
stat /etc/passwd
Plik: „/etc/passwd”
rozmiar: 1921 bloków: 8 bloki I/O: 4096 zwykły plik
Urządzenie: 802h/2050d inody: 13633325 dowiązań: 1
Dostęp: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root)
Dostęp: 2015-10-22 17:05:37.708973389 +0200
Modyfikacja: 2015-04-27 17:21:31.581303491 +0200
Zmiana: 2015-04-27 17:21:31.617303490 +0200
Utworzenie: -
- marcin1982
- Moderator
- Posty: 1731
- Rejestracja: 05 maja 2011, 12:59
- Lokalizacja: Zagłębie Dąbrowskie