pam notify

pam/install

@@ -0,0 +1,12 @@
+#! /usr/bin/env bash
+
+dir="$(dirname $(readlink -f "${0}"))"
+
+cp "${dir}/notify-pma.sh" /usr/local/bin/notify-pma &&
+if [ ! -f /etc/pam.d/notify-pam ]
+then
+  cp "${dir}/notify-pma" /etc/pam.d/notify-pma &&
+  echo "@include notify-pam" >> /etc/pam.d/sudo &&
+  echo "@include notify-pam" >> /etc/pam.d/common-session
+fi
+

pam/notify-pam

@@ -0,0 +1,3 @@
+#%PAM-1.0
+
+session    optional     pam_exec.so /usr/local/bin/notify-pam

pam/notify-pam.sh

@@ -0,0 +1,12 @@
+#! /usr/bin/env sh
+
+[ "$PAM_TYPE" = "open_session" ] || exit 0
+{
+  echo "User: $PAM_USER"
+  echo "Ruser: $PAM_RUSER"
+  echo "Rhost: $PAM_RHOST"
+  echo "Service: $PAM_SERVICE"
+  echo "TTY: $PAM_TTY"
+  echo "Date: `date`"
+  echo "Server: `hostname -f`"
+} | mail -s "`hostname -s` $PAM_SERVICE login: $PAM_USER" root