How To Set Email Alerts for SSH Root Login In Linux
To Set Email Alerts for SSH Root Login In Linux
While configuring Linux server, make sure that you should get a notification if any unauthorised login into root user. The server admin should get all email alerts from server. The procedure to set email alerts for SSH root login in Linux is explained.
Install the mailx package
Execute the following command to install mailx package.
[root@linuxhelp ~]# yum install mailx
Loaded plugins: aliases, changelog, fastestmirror, kabi, presto, refresh-packagekit, security, tmprepo,
: verify, versionlock
Loading support for CentOS kernel ABI
Setting up Install Process
Loading mirror speeds from cached hostfile
* base: centos.webwerks.com
* epel: epel.mirror.net.in
.
.
.
Installing : mailx-12.4-8.el6_6.x86_64 1/1
Verifying : mailx-12.4-8.el6_6.x86_64 1/1
Installed:
mailx.x86_64 0:12.4-8.el6_6
Complete!
Go to /root directory and add the following statements in .bashrc file.
[root@linuxhelp ~]# vim .bashrc
echo ' ALERT - Root Shell Access linuxhelp.com on:' `date` `who` | mail -s " Alert: Root Access" [email protected]
Enter your own server IP or Hostname and enter your valid mail-id.
Using ssh command, login to the configured server in terminal as root user.
root@linuxhelp:/home/user1# ssh [email protected]
[email protected]' s password:
Last login: Tue Jun 21 15:54:47 2016 from 192.168.5.137
A mail alert is sent to the respective mail-id, after the successful login.
To receive mail alert for multiple mail id' s, add the following lines in the .bashrc file.
[root@linuxhelp ~]# vim .bashrc
echo ' ALERT - Root Shell Access linuxhelp.com on:' `date` `who` | mail -s " Alert: Root Access" [email protected], [email protected]
Again login to the server through ssh command.
root@linuxhelp:/home/user1# ssh [email protected]
[email protected]' s password:
Last login: Tue Jun 21 15:56:47 2016 from 192.168.5.137
Open the mail and check the alert
Sometimes the mail will be stored in Spam.
To create alert for User login
Login as normal user. Go to user’ s home directory and open the .bashrc file.
[root@linuxhelp ~]# cd /home/user1/
[root@linuxhelp user1]# vim .bashrc
Once the configuration is done, logout that user and again login to check the mail alert.
Comments ( 0 )
No comments available