#!/usr/bin/ksh # # Report on logins that happened at odd hours # # From=$1 To=$2 LogDir=/usr/local/logs/system Logfile=$( /usr/bin/audsys | /usr/bin/grep "current file" | /usr/bin/awk '/audfile/ { print $3 } ') /usr/bin/audisp -e login -t $From -s $To $Logfile > /tmp/ol.$$ /usr/bin/mailx -s "Off-Hour logins for $(date)" secureadmins < /tmp/ol.$$ /usr/bin/cat /tmp/ol.$$ >> $LogDir/oddlogins.log /usr/bin/rm -f /tmp/ol.$$