To setup email notification, login to your server as root.
add the following line at the end, changing
"ServerName" to the host-name of your server and
"[email protected]" to your own email address.
echo 'ALERT - Root Shell Access (Server-name) on:' `date` `who` | mail -s "Alert: Root Access from `who | cut -d"(" -f2 | cut -d")" -f1`" [email protected]
Save and exit.
Next time someone (hopefully you) logs on as root, you will get an email about this.