Re: [cobalt-users] idea...

[Chuck <nagy@xxxxxxxxxxxxxxxx>]

On Sat, 1 Jul 2000, Theodore Jones wrote:

> just wondering to myself now if it would be possible to write a little
> program that would monitor su's and send out an mail message any time
> anoyone su'd successfully to root...  i'm the only one that does this on
> my machine... so this would alert me that somethings terribly wrong...
> anyone allready have a program that can do this, or a custom script to
> work with...?

There are a number of tool that monitor the logs, and can be configured to
send out emails on specific events. You can start with the Red Hat
powertools CD. 'swatch' is the one I would recommend it does what you
asked for, and a lot more...
 

--
"A piece of software is like a work of art: it has to be abandoned to be
finished."