1> Tripwwire was installed before those changes...(Like 2 monthes ago when i installed linux it was like the secind thing i installed)

2>YES i did a REDHAT update. I update as soon as a new patch comes out...And there was some on Friday and Saturday, i think PAM was one of them this weekend.

3>I have checked /var/log messages but cant see any other users login in except for me SU
to Root. Session opened for user root by Mike(Uid=500)


4>I DELETED and CREATED a USER on Saturday.