4
votes
3answers
4k views

“Successful su for user by root” - suspicious entries in my /var/log/auth.log?

This post on reddit made me go through my logs. That's when I discovered the following entries which appeared on two non-subsequent days. "user" is my user account. Aug 4 22:50:37 UbuntuSystem sudo: ...