| http://www.w3.org/ns/prov#value | - If it happens again, you can try to e.g. write some kind of surveillance script that creates a diff of the passwd and shadow file hourly as cronjob, so you will be able to get an idea when there is something changed and then try to dind e.g. cronjobs that might have changed it or get an idea if you used any special application at that time etc.
|
