[lug] is this a real user?

dan radom dan at radom.org
Sat Oct 19 09:12:38 MDT 2002

being that the shell is /sbin/nologin, and the UID/GID is low i would say
it's a system daemon account.


* Michael J. Hammel (mjhammel at graphics-muse.org) wrote:
> I just did an update via Red Carpet last night and found this entry in my logs
> this morning:
> useradd[21118]: new group: name=vcsa, gid=69 useradd[21118]: new user:
> name=vcsa, uid=69, gid=69, home=/dev, shell=/sbin/nologin
> Is this a real user or did someone hack me?  The pw entry says:
> vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin

More information about the LUG mailing list