Command to check if your Ubuntu 20.O4 laptop has been "enslaved"?

Started by mahesh, Sep 14, 2023, 03:17 AM

Previous topic - Next topic

mahesh

Hi All,
I wonder if there are any "quick" commands to check if one is still in control of one's laptop or if the OS might be compromised?

Although I only use LibreOffice on my laptop, I noticed a lot of the following entries in my system logs, which to me seem strange, as they happen while I am typing essays on my laptop. In other words, I never opened the terminal to give these commands as root:

pam_unix(cron:session): session opened for user root by (uid=0)
(root) CMD ( cd / && run-parts --report /etc/cron.hourly)

I have no special additional software or anything else on this laptop. I never entered any of these commands for actions running in the background, no cron jobs.

On an Ubuntu platform I read that cron jobs should be checked as such hourly commands etc are signs of having been hacked. How do I check the files for malicious cron jobs?

Thanks for your time!