LOG Frage

[gehackter]

Nachtrag

Aug 19 16:10:10 HOST sshd[9014]: Accepted keyboard-interactive/pam for USER from MEINE_IP port 61570 ssh2
Aug 19 16:10:10 HOST sshd[9014]: debug1: monitor_child_preauth: USER has been authenticated by privileged process
Aug 19 16:10:10 HOST sshd[9061]: (pam_unix) session opened for user USER by (uid=0)
Aug 19 16:10:10 HOST sshd[9061]: debug1: PAM: reinitializing credentials
Aug 19 16:10:10 HOST sshd[9061]: debug1: permanently_set_uid: 1028/100
Aug 19 16:10:10 HOST sshd[9061]: debug1: Entering interactive session for SSH2.
Aug 19 16:10:10 HOST sshd[9061]: debug1: server_init_dispatch_20
Aug 19 16:10:10 HOST sshd[9061]: debug1: server_input_channel_open: ctype session rchan 256 win 16384 max 16384
Aug 19 16:10:10 HOST sshd[9061]: debug1: input_session_request
Aug 19 16:10:10 HOST sshd[9061]: debug1: channel 0: new [server-session]
Aug 19 16:10:10 HOST sshd[9061]: debug1: session_new: init
Aug 19 16:10:10 HOST sshd[9061]: debug1: session_new: session 0
Aug 19 16:10:10 HOST sshd[9061]: debug1: session_open: channel 0
Aug 19 16:10:10 HOST sshd[9061]: debug1: session_open: session 0: link with channel 0
Aug 19 16:10:10 HOST sshd[9061]: debug1: server_input_channel_open: confirm session
Aug 19 16:10:10 HOST sshd[9061]: debug1: server_input_channel_req: channel 0 request pty-req reply 1
Aug 19 16:10:10 HOST sshd[9061]: debug1: session_by_channel: session 0 channel 0
Aug 19 16:10:10 HOST sshd[9061]: debug1: session_input_channel_req: session 0 req pty-req
Aug 19 16:10:10 HOST sshd[9061]: debug1: Allocating pty.
Aug 19 16:10:10 HOST sshd[9014]: debug1: session_new: init
Aug 19 16:10:10 HOST sshd[9014]: debug1: session_new: session 0
Aug 19 16:10:10 HOST sshd[9061]: debug1: session_pty_req: session 0 alloc /dev/pts/1
Aug 19 16:10:10 HOST sshd[9061]: debug1: server_input_channel_req: channel 0 request shell reply 1
Aug 19 16:10:10 HOST sshd[9061]: debug1: session_by_channel: session 0 channel 0
Aug 19 16:10:10 HOST sshd[9061]: debug1: session_input_channel_req: session 0 req shell
Aug 19 16:10:10 HOST sshd[9061]: debug1: PAM: setting PAM_TTY to "/dev/pts/1"
Aug 19 16:10:10 HOST sshd[9062]: debug1: Setting controlling tty using TIOCSCTTY.
Aug 19 16:10:17 HOST su[9069]: + pts/1 USER:root
Aug 19 16:10:17 HOST su[9069]: (pam_unix) session opened for user root by USER(uid=1028)

wenn ich mich einlogge, sieht es wie folgt aus "su[9069]: + pts/1 USER:root", statt wie bei den test "su[21003]: + pts/1 root:root"

hat es ein Grund, warum bei ihn root:root und bei mir BENUTZERNAME:root steht?

danke