Trusted, Bureaucrats, Administrators
12,424
edits
Changes
From Amahi Wiki
Created page with "This guide shows a simple way to know when someone logged in as root or normal user. It will send an email alert notification to the specified email address along with the IP..."
This guide shows a simple way to know when someone logged in as root or normal user. It will send an email alert notification to the specified email address along with the IP address of last login.
* [[Open_Terminal|As root user]] create ''ssh_email_alert.sh'' with the following text:
<pre>#!/bin/bash
tmptxt="/tmp/ssh_alert_email.txt"
ip="`who -m | cut -d'(' -f2 | cut -d')' -f1`"
echo "ALERT - SSH Shell Access" > $tmptxt
echo "" >> $tmptxt
echo "SSH Login:" >> $tmptxt
echo "`who -m`" >> $tmptxt
echo "" >> $tmptxt
echo "IP:" >> $tmptxt
echo "$ip" >> $tmptxt
echo "" >> $tmptxt
echo "Access time:" >> $tmptxt
echo "`date`" >> $tmptxt
echo "" >> $tmptxt
echo "Current sudo:" >> $tmptxt
echo "`whoami`" >> $tmptxt
echo "" >> $tmptxt
echo "Home path:" >> $tmptxt
echo "`pwd`" >> $tmptxt
#cat $tmptxt
cat $tmptxt | mail -s "Alert: SSH Access from $ip" name@domain.com
rm -fr $tmptxt</pre>
:'''NOTE:''' Ensure you replace name@domain.com with your email address.
* Set execute permissions:
chmod 755 /usr/bin/ssh_email_alert.sh
* Edit ''/etc/profile'' and add this to the bottom of the file:
ssh_email_alert.sh
You should not get an email anytime a user logs into your HDA via Secure Shell.
Reference: [http://linux.alanstudio.hk/ssh_emailalert.htm Email Alert for SSH login]
* [[Open_Terminal|As root user]] create ''ssh_email_alert.sh'' with the following text:
<pre>#!/bin/bash
tmptxt="/tmp/ssh_alert_email.txt"
ip="`who -m | cut -d'(' -f2 | cut -d')' -f1`"
echo "ALERT - SSH Shell Access" > $tmptxt
echo "" >> $tmptxt
echo "SSH Login:" >> $tmptxt
echo "`who -m`" >> $tmptxt
echo "" >> $tmptxt
echo "IP:" >> $tmptxt
echo "$ip" >> $tmptxt
echo "" >> $tmptxt
echo "Access time:" >> $tmptxt
echo "`date`" >> $tmptxt
echo "" >> $tmptxt
echo "Current sudo:" >> $tmptxt
echo "`whoami`" >> $tmptxt
echo "" >> $tmptxt
echo "Home path:" >> $tmptxt
echo "`pwd`" >> $tmptxt
#cat $tmptxt
cat $tmptxt | mail -s "Alert: SSH Access from $ip" name@domain.com
rm -fr $tmptxt</pre>
:'''NOTE:''' Ensure you replace name@domain.com with your email address.
* Set execute permissions:
chmod 755 /usr/bin/ssh_email_alert.sh
* Edit ''/etc/profile'' and add this to the bottom of the file:
ssh_email_alert.sh
You should not get an email anytime a user logs into your HDA via Secure Shell.
Reference: [http://linux.alanstudio.hk/ssh_emailalert.htm Email Alert for SSH login]
