On Fri, Feb 25, 2005 at 01:27:52PM -0500, Terry Polzin wrote: > > Feb 25 11:21:01 seth crond(pam_unix)[4381]: session opened for user > > anderson by (uid=0) Feb 25 11:21:02 seth crond(pam_unix)[4381]: session > > closed for user anderson Feb 25 11:25:01 seth crond(pam_unix)[4396]: > > session opened for user root by (uid=0) Feb 25 11:25:01 seth > > crond(pam_unix)[4396]: session closed for user root Feb 25 11:27:01 seth > > crond(pam_unix)[4454]: session opened for user anderson by (uid=0) Feb 25 [...] > I'd take a closer look at /etc/syslog.conf, mine has the following lines in > it. > # Log cron stuff > cron.* /var/log/cron Yeah, except I don't think this is coming from cron directly -- it's from pam_unix, as cron switches users. -- Matthew Miller mattdm@xxxxxxxxxx <http://www.mattdm.org/> Boston University Linux ------> <http://linux.bu.edu/>
