Root Access Notifications

[stealthhosts]

----------------------------------------
This article is provided free by
Stealth IT Solutions Limited
It is free for non-distribution only.
Due to the nature of this data it may
not be edited, no data may be removed
including this text.
With thanks to admin0
myshashi2010@yahoo.com
No responsibility is accepted or implied
Proceed at your own risk
------http://www.stealthhosts.com-------

Root Access Notification:

This will inform you each time access is made to the root account:

In SSH:

cd /root

edit .bashrc and add the following at the end, for freebsd: edit .cshrc

echo -e "root access on `date`" '\n' `who` | mail -s "Root Alert!" you@youremail.com

--------------------------------------------------------------------------------

Daily Notifications:

cd /etc/cron.daily

contents of: pstree.cron

#!/bin/sh
LANG=en_US
pstree | mail -s "process report " you@youremail.com

contents of: top.cron

#!/bin/sh
LANG=en_US
top -n1 | mail -s "top report " you@youremail.com

contents of: last.cron

#!/bin/sh
LANG=en_US
last -25 | mail -s "login report " you@youremail.com