22 lines
596 B
Bash
22 lines
596 B
Bash
#!/bin/bash
|
|
|
|
cat << 'EOF' > /etc/ssh/login-alert.sh
|
|
#!/bin/bash
|
|
|
|
source /etc/mailinabox.conf # load global vars
|
|
|
|
if [ "$PAM_TYPE" != "close_session" ]; then
|
|
IP=$(echo $SSH_CONNECTION | cut -d ' ' -f 1)
|
|
sendEmail -q -f "bot@$PRIMARY_HOSTNAME" -t "admin@$PRIMARY_HOSTNAME" -u "SSH Login: $PAM_USER from $PAM_RHOST" -m "If you don't recognize this login, your key or password may be compromised."
|
|
fi
|
|
EOF
|
|
|
|
chmod +x /etc/ssh/login-alert.sh
|
|
|
|
if grep -Fq "login-alert" /etc/pam.d/sshd
|
|
then
|
|
:
|
|
else
|
|
echo 'session optional pam_exec.so seteuid /etc/ssh/login-alert.sh' >> /etc/pam.d/sshd
|
|
fi
|