Bashscripts.org

I had another employee where I work log in to my machine remotely and reboot it.
I would like to be able to find a script or something that would warn me via email or some
other method when someone logs on to my computer remotely so that I might be able to stop them from rebooting my machine or kick them out of my machine before they can do any damage.

Thanks

Hello dtigue!

There are a few different ways you can do this... Here are two!

1) You could run a cron job every few minutes that compares the output of the 'last' command between runs.

2) You could run something in the background that continuously tails the logs (/var/log/secure?) for a more real-time approach.

I hope this gives you a starting point! Let us know if you have any more questions.

a password and/or account audit seems more in order.

I know this is a little late, but I'm posting this for future readers

You can add something simple like this to your ~/.profile or ~/.bash_profile



It's of course possible for the remote machine to prevent itself from reading the ~/.profile file

The sendmail line implies you have that up and running too. You could replace it with any type of notification you want. mutt, xmessage, or a sound file.