Here's the code, taken directly from the 'secure your server' sticky:
Code:
Server e-mail everytime someone logs in as root
To have the server e-mail you everytime someone logs in as root, SSH into server and login as root.
At command prompt type: pico .bash_profile
Scroll down to the end of the file and add the following line:
echo 'ALERT - Root Shell Access on:' `date` `who` | mail -s "Alert: Root Access from `who | awk '{print $6}'`" your@email.com
Save and exit.
So, there's no script that's changed...
Having said that, when CP11 got updated, MailScanner choked, so I reinstalled using CS MailScanner package, so perhaps that's what's triggering it...
I'll have to try restarting MailScanner and see if that does as suggested.
And since you mention it, I've not been receiving (that I recall) the normal upcp emails... have to look into that as well
