Oct 31 2008

Root Login Notifier Script

Ryan C. Merritt

I recently decided to write a Root Login Notifier Script this script checks every user that logs in as root or switches user to root against your firewall’s allowed hosts if the IP address of the root user is not in the allowed hosts list it silent sends an email to the address specified in the script listing the the username they sudo from or logged in as, as well as their ip address, and the date/time.  If the root user is in the allowed hosts list of the firewall it will echo “Welcome Super User”.

› Continue reading