>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sam Kuper >Subject: Re: Send email on calls to su
> >>2008/8/20 Gabriel Parrondo <[EMAIL PROTECTED]> >>You may want to look into some kind of logwatch. Every time someone uses >>su, this comes out on /var/log/auth.log: >>Aug 20 22:30:00 localhost su[5120]: + pts/1 gabriel:root >> >>You should configure your logwatch to look for it (shouldn't be hard, >>take a look at logwatch and log2mail) and e-mail on you. > >This sounds like the easiest way for me to achieve what I'm after. > >Many thanks! > >Sam Just to throw another one out there if you are interested... Swatch works really well for these kind of things. I use it all of the time. Good luck and Have Fun! ~S~
