memo@smartseals:~$ tail -n 100 /var/log/auth.log
Nov 29 16:04:21 smartseals su[2178]: pam_systemd(su:session): Cannot create session: Already running in a session
Nov 29 16:07:55 smartseals su[2254]: Successful su for memo by root
Nov 29 16:07:55 smartseals su[2254]: + /dev/pts/3 root:memo
Nov 29 16:07:55 smartseals su[2254]: pam_unix(su:session): session opened for user memo by memo(uid=0)
Nov 29 16:07:55 smartseals su[2254]: pam_systemd(su:session): Cannot create session: Already running in a session
Nov 29 16:08:25 smartseals sudo: memo : TTY=pts/3 ; PWD=/home/memo ; USER=root ; COMMAND=/sbin/reboot
Nov 29 16:08:25 smartseals sudo: pam_unix(sudo:session): session opened for user root by memo(uid=0)
Nov 29 16:08:25 smartseals sshd[1759]: pam_unix(sshd:session): session closed for user memo
Nov 29 16:08:25 smartseals sudo: pam_unix(sudo:session): session closed for user root
Nov 29 16:08:25 smartseals sudo: pam_unix(sudo:session): session closed for user root
Nov 29 16:08:50 smartseals systemd-logind[799]: New seat seat0.
Nov 29 16:08:50 smartseals systemd-logind[799]: Watching system buttons on /dev/input/event1 (Power Button)
Nov 29 16:08:50 smartseals systemd-logind[799]: Watching system buttons on /dev/input/event2 (Video Bus)
Nov 29 16:08:50 smartseals systemd-logind[799]: Watching system buttons on /dev/input/event0 (Power Button)
Nov 29 16:08:50 smartseals sshd[939]: Server listening on 0.0.0.0 port 22.
Nov 29 16:08:50 smartseals sshd[939]: Server listening on :: port 22.
Nov 29 16:08:51 smartseals lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Nov 29 16:08:51 smartseals lightdm: PAM adding faulty module: pam_kwallet.so
Nov 29 16:08:51 smartseals lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Nov 29 16:08:51 smartseals lightdm: PAM adding faulty module: pam_kwallet5.so
Nov 29 16:08:51 smartseals lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Nov 29 16:08:51 smartseals systemd-logind[799]: New session c1 of user lightdm.
Nov 29 16:08:51 smartseals systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Nov 29 16:08:52 smartseals lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Nov 29 16:08:52 smartseals lightdm: PAM adding faulty module: pam_kwallet.so
Nov 29 16:08:52 smartseals lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Nov 29 16:08:52 smartseals lightdm: PAM adding faulty module: pam_kwallet5.so
Nov 29 16:08:52 smartseals lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "memo"
Nov 29 16:08:52 smartseals sudo: root : TTY=unknown ; PWD=/usr/share/zoneminder/www ; USER=www-data ; COMMAND=/bin/true
Nov 29 16:08:52 smartseals sudo: pam_unix(sudo:session): session opened for user www-data by (uid=0)
Nov 29 16:08:52 smartseals sudo: pam_unix(sudo:session): session closed for user www-data
Nov 29 16:08:52 smartseals sudo: root : TTY=unknown ; PWD=/usr/share/zoneminder/www ; USER=www-data ; COMMAND=/usr/bin/zmdc.pl check
Nov 29 16:08:52 smartseals sudo: pam_unix(sudo:session): session opened for user www-data by (uid=0)
Nov 29 16:08:52 smartseals sudo: pam_unix(sudo:session): session closed for user www-data
Nov 29 16:08:52 smartseals sudo: root : TTY=unknown ; PWD=/usr/share/zoneminder/www ; USER=www-data ; COMMAND=/usr/bin/zmdc.pl startup
Nov 29 16:08:52 smartseals sudo: pam_unix(sudo:session): session opened for user www-data by (uid=0)
Nov 29 16:08:53 smartseals sshd[939]: Received SIGHUP; restarting.
Nov 29 16:08:53 smartseals sshd[939]: Server listening on 0.0.0.0 port 22.
Nov 29 16:08:53 smartseals sshd[939]: Server listening on :: port 22.
Nov 29 16:08:53 smartseals sshd[939]: Received SIGHUP; restarting.
Nov 29 16:08:53 smartseals sshd[939]: Server listening on 0.0.0.0 port 22.
Nov 29 16:08:53 smartseals sshd[939]: Server listening on :: port 22.
Nov 29 16:08:54 smartseals sshd[939]: Received SIGHUP; restarting.
Nov 29 16:08:54 smartseals sshd[939]: Server listening on 0.0.0.0 port 22.
Nov 29 16:08:54 smartseals sshd[939]: Server listening on :: port 22.
Nov 29 16:08:54 smartseals sshd[939]: Received SIGHUP; restarting.
Nov 29 16:08:54 smartseals sshd[939]: Server listening on 0.0.0.0 port 22.
Nov 29 16:08:54 smartseals sshd[939]: Server listening on :: port 22.
Nov 29 16:08:55 smartseals sudo: pam_unix(sudo:session): session closed for user www-data
Nov 29 16:08:55 smartseals sudo: root : TTY=unknown ; PWD=/usr/share/zoneminder/www ; USER=www-data ; COMMAND=/usr/bin/zmdc.pl start zmc -m 3
Nov 29 16:08:55 smartseals sudo: pam_unix(sudo:session): session opened for user www-data by (uid=0)
Nov 29 16:08:55 smartseals sudo: pam_unix(sudo:session): session closed for user www-data
Nov 29 16:08:55 smartseals sudo: root : TTY=unknown ; PWD=/usr/share/zoneminder/www ; USER=www-data ; COMMAND=/usr/bin/zmdc.pl start zma -m 3
Nov 29 16:08:55 smartseals sudo: pam_unix(sudo:session): session opened for user www-data by (uid=0)
Nov 29 16:08:55 smartseals sudo: pam_unix(sudo:session): session closed for user www-data
Nov 29 16:08:55 smartseals sudo: root : TTY=unknown ; PWD=/usr/share/zoneminder/www ; USER=www-data ; COMMAND=/usr/bin/zmdc.pl start zmc -m 7
Nov 29 16:08:55 smartseals sudo: pam_unix(sudo:session): session opened for user www-data by (uid=0)
Nov 29 16:08:56 smartseals sudo: pam_unix(sudo:session): session closed for user www-data
Nov 29 16:08:56 smartseals sudo: root : TTY=unknown ; PWD=/usr/share/zoneminder/www ; USER=www-data ; COMMAND=/usr/bin/zmdc.pl start zmfilter.pl
Nov 29 16:08:56 smartseals sudo: pam_unix(sudo:session): session opened for user www-data by (uid=0)
Nov 29 16:08:56 smartseals sudo: pam_unix(sudo:session): session closed for user www-data
Nov 29 16:08:56 smartseals sudo: root : TTY=unknown ; PWD=/usr/share/zoneminder/www ; USER=www-data ; COMMAND=/usr/bin/zmdc.pl start zmaudit.pl -c
Nov 29 16:08:56 smartseals sudo: pam_unix(sudo:session): session opened for user www-data by (uid=0)
Nov 29 16:08:56 smartseals sudo: pam_unix(sudo:session): session closed for user www-data
Nov 29 16:08:56 smartseals sudo: root : TTY=unknown ; PWD=/usr/share/zoneminder/www ; USER=www-data ; COMMAND=/usr/bin/zmdc.pl start zmwatch.pl
Nov 29 16:08:56 smartseals sudo: pam_unix(sudo:session): session opened for user www-data by (uid=0)
Nov 29 16:08:56 smartseals sudo: pam_unix(sudo:session): session closed for user www-data
Nov 29 16:08:56 smartseals sudo: root : TTY=unknown ; PWD=/usr/share/zoneminder/www ; USER=www-data ; COMMAND=/usr/bin/zmdc.pl start zmupdate.pl -c
Nov 29 16:08:56 smartseals sudo: pam_unix(sudo:session): session opened for user www-data by (uid=0)
Nov 29 16:08:56 smartseals sudo: pam_unix(sudo:session): session closed for user www-data
Nov 29 16:08:56 smartseals sudo: root : TTY=unknown ; PWD=/usr/share/zoneminder/www ; USER=www-data ; COMMAND=/usr/bin/zmdc.pl start zmtelemetry.pl
Nov 29 16:08:56 smartseals sudo: pam_unix(sudo:session): session opened for user www-data by (uid=0)
Nov 29 16:08:57 smartseals sudo: pam_unix(sudo:session): session closed for user www-data
Nov 29 16:08:57 smartseals sshd[1536]: Accepted publickey for memo from 10.8.0.26 port 49044 ssh2: RSA SHA256:Mr7AvNspA4JMLdnm3VsYyDlKKeRrbqP6/iwGnacEvkA
Nov 29 16:08:57 smartseals sshd[1536]: pam_unix(sshd:session): session opened for user memo by (uid=0)
Nov 29 16:08:57 smartseals systemd-logind[799]: New session 1 of user memo.
Nov 29 16:08:57 smartseals systemd: pam_unix(systemd-user:session): session opened for user memo by (uid=0)
Nov 29 16:08:58 smartseals sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/systemctl stop gpsd.socket
Nov 29 16:08:58 smartseals sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Nov 29 16:08:58 smartseals sudo: pam_unix(sudo:session): session closed for user root
Nov 29 16:08:58 smartseals sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/systemctl disable gpsd.socket
Nov 29 16:08:58 smartseals sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Nov 29 16:08:58 smartseals sudo: pam_unix(sudo:session): session closed for user root
Nov 29 16:08:58 smartseals sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/local/sbin/gpsd -b -n -G udp://0.0.0.0:5000
Nov 29 16:08:58 smartseals sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Nov 29 16:08:58 smartseals sudo: pam_unix(sudo:session): session closed for user root
Nov 29 16:09:01 smartseals CRON[1815]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 29 16:09:01 smartseals CRON[1815]: pam_unix(cron:session): session closed for user root
Nov 29 16:14:57 smartseals sudo: memo : TTY=pts/3 ; PWD=/home/memo ; USER=root ; COMMAND=/bin/su
Nov 29 16:14:57 smartseals sudo: pam_unix(sudo:session): session opened for user root by memo(uid=0)
Nov 29 16:14:57 smartseals su[1958]: Successful su for root by root
Nov 29 16:14:57 smartseals su[1958]: + /dev/pts/3 root:root
Nov 29 16:14:57 smartseals su[1958]: pam_unix(su:session): session opened for user root by memo(uid=0)
Nov 29 16:14:57 smartseals su[1958]: pam_systemd(su:session): Cannot create session: Already running in a session
Nov 29 16:15:14 smartseals su[1975]: Successful su for memo by root
Nov 29 16:15:14 smartseals su[1975]: + /dev/pts/3 root:memo
Nov 29 16:15:14 smartseals su[1975]: pam_unix(su:session): session opened for user memo by memo(uid=0)
Nov 29 16:15:14 smartseals su[1975]: pam_systemd(su:session): Cannot create session: Already running in a session
Nov 29 16:17:01 smartseals CRON[2047]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 29 16:17:01 smartseals CRON[2047]: pam_unix(cron:session): session closed for user root