pfSense

Hello,

This bug report is following a community post at https://forum.netgate.com/topic/183563/strange-os-account-changes-log-records?sort=oldest_to_newest.

My pfSense was installed about a week ago, I think 17 of October 2023.
It is installed on a cloud VM, from the ISO install file.

Looking now at Status > System Logs > Authentication > OS Account Changes, I see there logs from the 28 of June 2023... very strange.

In the above link another forum member observed the same.

In my view a newly installed software, assuming the local "pc" has a correct date and time, should not have any log record that is prior to the date-time the installation started.

The log records:
(Added some 17th of October records for reference)

"
2023-10-17 10:50:20 [unknown:useradd] admin(0) home /root made
2023-10-17 10:50:20 [unknown:groupmod] all(1998)
2023-10-17 10:50:20 [unknown:groupadd] all(1998)
2023-10-17 10:50:20 [unknown:groupadd] admins(1999)
2023-06-28 04:40:24 [root:useradd] openvpn(301):openvpn(301):OpenVPN pseudo-user:/nonexistent:/usr/sbin/nologin
2023-06-28 04:40:24 [root:useradd] dhcpd(136):dhcpd(136):ISC DHCP daemon:/nonexistent:/usr/sbin/nologin
2023-06-28 04:40:24 [root:groupadd] openvpn(301)
2023-06-28 04:40:24 [root:groupadd] dhcpd(136)
2023-06-28 04:40:22 [root:useradd] messagebus(556):messagebus(556):D-BUS Daemon User:/nonexistent:/usr/sbin/nologin
2023-06-28 04:40:22 [root:groupadd] messagebus(556)
2023-06-28 04:40:21 [root:useradd] cyrus(60):cyrus(60):the cyrus mail server:/nonexistent:/usr/sbin/nologin
2023-06-28 04:40:21 [root:groupadd] cyrus(60)
"