Security question - uids of 0

[Radek Kozlowski]

On Mon, Aug 16, 2004 at 09:57:37AM -0500, James A. Coulter wrote:
> The following appeared in my latest daily security run output:
> 
> 	Checking for uids of 0:
> 	root 0
> 	toor 0
> 
> This is the first time I've seen this message.
> 
> I checked /etc/passwd and found this:
> 
> 	root:*:0:0:Charlie &:/root:/bin/csh
> 	toor:*:0:0:Bourne-again Superuser:/root:
> 
> I am running FreeBSD 4.10 as a gateway/router/firewall with IPFW for a small
> home LAN.  
> 
> I ran ps -aux and looked for any processes owned by "toor" but didn't find any.
> 
> Is this something to be concerned about?  
> 
> Sorry if this is an obvious question, but I am still very much a newbie
> and trying to learn what I can about security.
> 
> Thanks for your patience,

http://www.freebsd.org/doc/faq/security.html#TOOR-ACCOUNT

-Radek