Anyone know anything about this? Looks suspiciously like someone gained some level of access to the server.

On Mon, Mar 9, 2015 at 7:49 PM, <web-ooo@omnicommons.org> wrote:

omnicommons.org : Mar  9 19:49:29 : web-ooo : user NOT in sudoers ; TTY=pts/6 ; PWD=/home/web-ooo ; USER=root ; COMMAND=/bin/su jenny

_______________________________________________
sysadmins mailing list
sysadmins@lists.omnicommons.org
https://omnicommons.org/lists/listinfo/sysadmins

_______________________________________________
sudo-sys mailing list
sudo-sys@lists.sudoroom.org
https://lists.sudoroom.org/listinfo/sudo-sys