Ja that was me sorry!
On Mar 10, 2015 2:33 AM, "Marc Juul" <juul(a)labitat.dk> wrote:
  Anyone know anything about this? Looks suspiciously
like someone gained
 some level of access to the server.
 On Mon, Mar 9, 2015 at 7:49 PM, <web-ooo(a)omnicommons.org> wrote:
  omnicommons.org : Mar  9 19:49:29 : web-ooo :
user NOT in sudoers ;
 TTY=pts/6 ; PWD=/home/web-ooo ; USER=root ; COMMAND=/bin/su jenny
 _______________________________________________
 sysadmins mailing list
 sysadmins(a)lists.omnicommons.org
 
https://omnicommons.org/lists/listinfo/sysadmins
  
 _______________________________________________
 sudo-sys mailing list
 sudo-sys(a)lists.sudoroom.org
 
https://lists.sudoroom.org/listinfo/sudo-sys