Root login logged multiple times over the past week



  • Running 1.2RC2 in bridged mode.  I do have a rule that allows for ssh access but only during certain times of the day, only on certain days, only from specific ip addresses, and on an odd port number.

    I am repeatedly seeing "login: login on console as root" being logged on System.  Today for example it's occuring about every 15 minutes.  It's even occuring at times that my ssh rule is disabled by the schedule I've set to that rule.  Heck even during those hours it is logged I'm asleep and the systems that utilize it are completely shut down.  There is no console hooked up directly to the box.



  • This is normal. The console automatically logs itself out and back again periodically.



  • @sullrich:

    This is normal. The console automatically logs itself out and back again periodically.

    Hmmm - maybe this is esoteric but could the system log what is happening when this occurs to keep people from wondering - maybe something to identify console auto-login/logoff???

    :)

    gm…



  • Why?  If it really bothers you this much simply disable console logins in System -> Advanced.


Log in to reply