Thanks I have changed root passwords. > > 8.2.1 has a root-level exploit. Assume you've been cracked until you can verify > otherwise. A brief glance at the logs may not be enough to detect the cracking, if the > perpetrator is any good, since superuser can falsify the logs. > > - Kevin