How to setup the root login alert notification email?

Its very important to keep a check on your servers and who logs into the server, From security point of view its very important to keep track specially for root user login, As server owner or administrator you will be the only person having root access for your server and nobody else should be permitted to login into the server with root user unless you have specifically given access to. So with the help of this small one line script given below you can always keep a watch on root login attempts.

 Setup Method

1.) Login into the server as root user.
2.) Change the path to /root i.e cd /root
3.) Edit the .bashrc file i.e  vi .bashrc
4.) Paste the following code at the bottom -

echo 'ALERT - Root Shell Access (hostname) on:' `date` `who` | mail -s "Alert: Root Access from `who | cut -d'(' -f2 | cut -d')' -f1`"

5.) Remember to change the hostname and email address in the code.
6.) Save and close the file, Logout and login again with root user to check if you receive the email alert.
7.) If you haven't received any email then mail function is not working. Consult your webmaster.

Was this answer helpful?

 Print this Article

Also Read

How to exclude file/folder from backup (pkgacct) on cPanel server?

Is it possible to exlude file/folder from the full cPanel backup on cPanel server? Solution :-...

Account Creation Status: failed. A database owner with the name <account-name> already exists.

I have deleted the account from the WHM but while recreating it, I was getting below error...

How to enable Hot Link Protection in cPanel?

To avoid other sites to use your website's bandwidth, you can enable the hot link protection....

A DNS entry for 'domain_name' already exists. You must remove this DNS entry from all servers in the DNS cluster to proceed.

While adding addon domain under cPanel, I was getting error as below - A DNS entry for...

Error:The system experienced the following error when it attempted to install the “OWASP ModSecurity Core Rule Set V3.0”

Issue while installing Comodo's WAF rules in cPanel - Error:The system experienced the following...

Powered by WHMCompleteSolution