Conversation
By the way, am I the only one here who have actually read Linux reports about failed sudo attempts?
3
0
0

@yura@udongein.xyz
I assume you are talking about the notorious "
Username is not in the sudoers file. This incident will be reported." ?
I know where to find them. All systems I (here and there) adminstrate do not have a need for that though.

1
0
1
@hannah particularly I'm about "you have new mail" message when you log in to the server. It shows such a information
1
0
0
@yura true story: if you happen to give your Linux system a hostname "linux.com" (and it can actually deliver mail), these reports end up in my inbox, where they periodically give me a heart attack.
0
0
5

@yura@udongein.xyz You log in via SSH? And you have a notification that tells you "you have new mail"?
And in that mail it says something about someone trying to get sudo but failing because they are not sudo?

My first question would be who that particular user is and what they tried to run
🤔

1
0
0
@hannah not sure about "not sudo" case but it definitely shows somebody's mistakes in entering password
1
0
0

@yura@udongein.xyz The most obvious case would be: You typed it in wrongly ~10 minutes ago.
I assume you did not do that?
Assuming yes:
Next question would be who that user is. I assume the user is the one you use?
If both are true: Someone else is using your account.

1
0
0
@hannah this time it was me doing it for demonstration
0
0
0