1
2
3
4
5
6
7
mutt -s "ROOTLOGIN@`hostname` from `who | cut -d'(' -f2 | cut -d')' -f1`" admin@example.com << EOF
ALERT - Root Shell Access
on `hostname`:

`date`
`who`
EOF

1
curl -d "token=$APITOKEN&user=$USERTOKEN&title=root.login@`hostname`&message=root user logged in @`hostname` %0Afrom: `who | cut -d'(' -f2 | cut -d')' -f1`×tamp=`date +%s`&priority=2&expire=3600&retry=60&sound=echo" -X POST https://api.pushover.net/1/messages.json