Re: real and effective user ids must match - Mailing list pgsql-admin

From david.lao@sharpasia.com.mo
Subject Re: real and effective user ids must match
Date
Msg-id 3865.202.175.123.162.1158295775.mailsage.folio@sharpasia.com.mo
Whole thread Raw
In response to Re: real and effective user ids must match  (Michael Fuhr <mike@fuhr.org>)
List pgsql-admin
>Do you have sudo?  If so then what does "sudo -u postgres id" show?
>If uid and euid are the same (both postgres) then you might be able
>to start the postmaster with sudo instead of su.

"sudo -u postgres id" show
uid=0(root) gid=26 euid=26(postgres) groups=26


>What do you mean by "the hacker"?  Do you know or suspect that
>you've been hacked?  If so then I'd recommend that you reinstall
>your system from trustworthy media, make sure you have current
>security patches, and close any configuration holes that might have
>let an intruder in.

Yes, I have been hacked, because I found a new unknown a/c in my system. and in log file get this message:
Sep  3 22:55:00 TWeb su(pam_unix)[24299]: session opened for user root by (uid=0)
Sep  3 22:55:17 TWeb su(pam_unix)[24299]: session closed for user root

David


pgsql-admin by date:

Previous
From: david.lao@sharpasia.com.mo
Date:
Subject: Re: real and effective user ids must match
Next
From: david.lao@sharpasia.com.mo
Date:
Subject: Re: real and effective user ids must match