Tmp Sessions created by a #

codegirl42

Well-Known Member
Mar 9, 2006
93
0
156
I noticed a few sessions in our /tmp directory just now.
Instead of being created by a user such as nobody, or a user....they were created by a number with 5 digits.

Has anyone had this before? Is it something server created maybe?
The numbers are 32054 and 32031.

Any ideas?
 

Spiral

BANNED
Jun 24, 2005
2,020
8
193
The number is the UID of the account that created the file ....

Normally, linux will show you the username associated with the UID
(user's account number) taken from the /etc/passwd file.

However, if the user in question is deleted from the system then linux is
no longer able to associate the username and will instead display
the UID number in the directory listing.

Plain English: The user who created those files has been deleted!

(I'm still available for that security review if you want to contact me ;) )