Date:  Mon, 18 Sep 2006 09:23:03 +0100
From:  Dogsbody <dan (at mark) dogsbody.org>
Subject:  [coba-e:07040] Re: Users
To:  coba-e (at mark) bluequartz.org
Message-Id:  <450E5767.9080907 (at mark) dogsbody.org>
In-Reply-To:  <004c01c6daa9$dc11cc80$6400a8c0@YOUR4105E587B6>
References:  <004c01c6daa9$dc11cc80$6400a8c0@YOUR4105E587B6>
X-Mail-Count: 07040


> In /etc/passwd, is the following user allowed:
> root-admin:x:0:0::/root:/bin/bash

Please see the thread in the archives that starts 4348 ...
   http://bluequartz.org/ml/archive/coba-e/4300/thread.html

Personally I remove it as I never use it and it throws up a warning in Rootkit 
Hunter.. http://www.bqwiki.org/index.php/Checking_for_Rootkits#Rootkit_Hunter

P.S. Sorry for the bad advice on the log issues!

Dan