QUOTE (Ferret_dude)
someone posted this code wich wil mail you whenever someone has loged in as root with SSH
CODE
echo 'ALERT - Root Shell Access on:' `date` `who` | mail -s "Alert: Root Access on Server #1" webmaster@XXXXXXX.com <mailto:webmaster@XXXXXXX.com>
since a intruder could easely cover his/her tracks this wil be a good code to add since you wil be notified by mail
yes, i have already add this code in .bash_profile , thanks
QUOTE
If you use Redhat 9, typing last will give you a list of all the last logged in users
thanks.. i will try..
QUOTE
What operating system are you using?
Redhat 9