Server Sitters Tech Corner » SSH http://serversitters.com/technical Outsourced Web Hosting Support Wed, 15 Dec 2010 12:03:48 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Notify when a root user logs in http://serversitters.com/technical/security/notify-when-a-root-user-logs-in/ http://serversitters.com/technical/security/notify-when-a-root-user-logs-in/#comments Mon, 11 Jan 2010 07:02:32 +0000 Paul http://serversitters.com/technical/?p=187 If you don’t have this setup already you should! This is a great method to ensure you’re notified each time the root user connects to your server via SSH.

Edit the .bash_profile file of the user whose account you wish to monitor – typically: /root/.bash_profile

echo ‘ALERT – Root Shell Access on:’ `hostname` `date` `who` | mail -s “Alert: Root Access on `hostname`” email@yourdomain.com

You will then receive an email each time the selected user logs into the system via SSH. The email will provide you with their full connection string and IP so you can keep a close eye on who’s accessing a particular server with root privileges.

]]> http://serversitters.com/technical/security/notify-when-a-root-user-logs-in/feed/ 0