[lug] is this a real user?

[dan radom]

being that the shell is /sbin/nologin, and the UID/GID is low i would say
it's a system daemon account.

dan

* Michael J. Hammel (mjhammel at graphics-muse.org) wrote:
> I just did an update via Red Carpet last night and found this entry in my logs
> this morning:
> 
> useradd[21118]: new group: name=vcsa, gid=69 useradd[21118]: new user:
> name=vcsa, uid=69, gid=69, home=/dev, shell=/sbin/nologin
> 
> Is this a real user or did someone hack me?  The pw entry says:
> 
> vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin