Security Alert

**devellion** · 04-03-2006 02:56 AM

Hi,

I received this email this morning:

Subject: *** SECURITY information for xxx.xxx.com ***

xxx.xxx.com : Apr 3 02:25:09 : user : can't stat /etc/sudoers: No such file or directory ; TTY=pts/0 ; PWD=/home/user ; USER=root ; COMMAND=/bin/su -

Is this something I should worry about? Looks like some one is trying to get Super User access to my server.

**webignition** · 04-03-2006 04:24 AM

The file /etc/sudoers determines who can use the 'sudo' command and what privileges they have when doing so.

My thinking would be that the error "can't stat /etc/sudoers: No such file or directory" indicates that /etc/sudoers doesn't exist. Is this file present?

I wouldn't worry too much as the default /etc/sudoers config should only allow access to root - if root has been compromised, there's no point in worrying about whether root can sudo!