put this into /root/.bashrc:
ROOTALERT=$(echo "ALERT - Root Shell Access On: "$(date) $(hostname -f) $(who)); echo "$ROOTALERT" | mail -s "$ROOTALERT" email.address@domain.tld;
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.