Hello,

I have challenges in creating shell script, is there any one who can help me to site an exact example shell script for the following:
1. how to generate WARNING alert if there are any active root logins.
2. Check to see how many users are logged in and generate a WARNING alert if there are more than a given number of users.

Appreciate any help for this. I'd like to use that as my reference as I'm currently studying scripting.

Thank you.
Dong

What do you have so far?

w / who ?

Bash Command List:
http://ss64.com/bash/

General and Advanced Bash reference
http://tldp.org/HOWTO/Bash-Prog-Intro-HOWTO.html
http://www.tldp.org/LDP/abs/html/

1 members found this post helpful.

Hello, Thank you for your assistance. So far I have this but I am not really familiar on how to setup the conditions, as stated in the subject. Thanks again.

#!/bin/bash
exec >> /root/monitoring`date +%Y-%m-%d`.txt
nouser=`who | wc -l`
echo -e "User name: $USER (Login name: $LOGNAME)"
echo -e "Your O/s Type: $OSTYPE"
echo -e "Currently Logged: $nouser user(s)"

if [ -f /etc/redhat-release ]
then
echo -e "OS: `cat /etc/redhat-release`"
fi

echo -e "--------------------------------------------------------------------"
echo -e "Kernel Version:"
echo -e "--------------------------------------------------------------------"
cat /proc/sys/kernel/osrelease
echo -e "--------------------------------------------------------------------"

echo -e "Processes Running:"
ps auxf --width=200

Who will not report any root user that gets there via the su command... because there is no terminal assigned to the root user - it still belongs to the original user.

It will report root logins if root is logged in directly (via either ssh or through a virtual console).