For some critical machines when it is not usual that users login through SSH or execute SU to become superuser, we can use PAM module configuration to receive some kind of alert whenever a user logs into that machine or escalates privileges to root.
Sysadmin tricks: Get an alert when users log in
Sysadmin tricks: Get an alert when users log…
Sysadmin tricks: Get an alert when users log in
For some critical machines when it is not usual that users login through SSH or execute SU to become superuser, we can use PAM module configuration to receive some kind of alert whenever a user logs into that machine or escalates privileges to root.