在Ubuntu 13.04的/var/log/auth.log中查询

我已经在Ubuntu 13.04上安装了livecricketscore应用程序。但是它不会工作&之后我的auth.log文件显示

"Apr 1 11:50:01 lnode137 CRON[5075]: pam_unix(cron:session): session opened for user cricket by (uid=0)".

这是我的系统的/var/log/auth.log文件的一小部分。 有人能帮我删除这个日志文件中写的“用户蟋蟀by…”吗

Apr 1 11:50:01 lnode137 CRON[5075]: pam_unix(cron:session): session opened for user cricket by (uid=0)

Apr 1 11:50:02 lnode137 CRON[5075]: pam_unix(cron:session): session closed for user cricket

Apr 1 11:52:24 lnode137 sudo: RADIXLOCAL\ronak.gohel : TTY=pts/0 ; PWD=/home/likewise-open/RADIXLOCAL/ronak.gohel ; USER=root ; COMMAND=/bin/chmod 777 /var/log/auth.log

Apr 1 11:52:24 lnode137 sudo: pam_unix(sudo:session): session opened for user root by RADIXLOCAL\ronak.gohel(uid=0)

Apr 1 11:52:24 lnode137 sudo: pam_unix(sudo:session): session closed for user root

Apr 1 11:55:01 lnode137 CRON[5165]: pam_unix(cron:session): session opened for user cricket by (uid=0)

Apr 1 11:55:01 lnode137 CRON[5165]: pam_unix(cron:session): session closed for user cricket

Apr 1 11:55:36 lnode137 sudo: RADIXLOCAL\ronak.gohel : TTY=pts/0 ; PWD=/home/likewise-open/RADIXLOCAL/ronak.gohel ; USER=root ; COMMAND=/bin/dmesg -C

Apr 1 11:55:36 lnode137 sudo: pam_unix(sudo:session): session opened for user root by RADIXLOCAL\ronak.gohel(uid=0)

Apr 1 11:55:36 lnode137 sudo: pam_unix(sudo:session): session closed for user root

Apr 1 11:58:07 lnode137 sudo: RADIXLOCAL\ronak.gohel : TTY=pts/0 ; PWD=/home/likewise-open/RADIXLOCAL/ronak.gohel ; USER=root ; COMMAND=/usr/bin/apt-get autoremove cricket

Apr 1 11:58:07 lnode137 sudo: pam_unix(sudo:session): session opened for user root by RADIXLOCAL\ronak.gohel(uid=0)

Apr 1 11:58:47 lnode137 sudo: pam_unix(sudo:session): session closed for user root

Apr 1 12:00:01 lnode137 CRON[8017]: pam_unix(cron:session): session opened for user cricket by (uid=0)

Apr 1 12:00:01 lnode137 CRON[8017]: pam_unix(cron:session): session closed for user cricket

Apr 1 12:02:08 lnode137 sudo: RADIXLOCAL\ronak.gohel : TTY=pts/0 ; PWD=/home/likewise-open/RADIXLOCAL/ronak.gohel ; USER=root ; COMMAND=/usr/bin/gedit /var/log/auth.log.1

Apr 1 12:02:08 lnode137 sudo: pam_unix(sudo:session): session opened for user root by RADIXLOCAL\ronak.gohel(uid=0)

Apr 1 12:04:23 lnode137 sudo: pam_unix(sudo:session): session closed for user root

Apr 1 12:05:01 lnode137 CRON[8216]: pam_unix(cron:session): session opened for user cricket by (uid=0)

Apr 1 12:05:01 lnode137 CRON[8216]: pam_unix(cron:session): session closed for user cricket

Apr 1 12:10:01 lnode137 CRON[8267]: pam_unix(cron:session): session opened for user cricket by (uid=0)

Apr 1 12:10:01 lnode137 CRON[8267]: pam_unix(cron:session): session closed for user cricket

Apr 1 12:15:01 lnode137 CRON[8307]: pam_unix(cron:session): session opened for user cricket by (uid=0)

Apr 1 12:15:01 lnode137 CRON[8307]: pam_unix(cron:session): session closed for user **cricket**

Apr 1 12:17:01 lnode137 CRON[8329]: pam_unix(cron:session): session opened for user **root** by (uid=0)

Apr 1 12:17:01 lnode137 CRON[8329]: pam_unix(cron:session): session closed for user root

---

应用程序似乎创建了一个名为cricket的新用户，并添加了一个cron作业，该作业可能会使用cricket用户更新分数

您可以通过命令删除用户。 另请参阅删除cron作业的指南