I just had a question regarding the attached part of my /var/log/auth.log file. (Raspberry Pi 2B, running Raspbian Jessy, fully updated / upgraded)

First of all I got rid of the root user all together, but i seem to see a bunch of log-ins for that user (displaying root and/or uid=0), which seem to be locally, as there is no IP-address.

The second question is, why is there an entry for a session of user smmsp every couple minutes.


  • 1
    That's cron logs. Check your crontab. – Mat Sep 20 '16 at 14:32
  • 2
    It is generally preferred to display (possibly redacted) output as code block instead of using screen shots. – countermode Sep 20 '16 at 14:43

The first two and the last one are CRONs, which is needed for some automated tasks (depend on what is running on your machine sudo crontab -e?

The third is probably you running the tail -f /var/log/auth.log through sudo.

There is nothing to be concerned about. You can't get rid of root user, otherwise you would not be able to do any administrative tasks.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.