su alert

[helpmhost]

Hi,

How do I configure a linux system to send an email (or just execute a script) as soon as someone does an su?

I know that it logs the su and I could have logwatch or swatch check for it periodically, but is there a quicker (instant) method?

Thanks.

[Roxoff]

I'm not sure how to do this, but you could change the root password and keep it to yourself, then any users that you want to have root access, grant them specific permissions using the 'sudo' command. You can limit people to certain commands then, and everything they do is logged.