if [ `id -u` = "0" -a `echo $USER` != "root" ]; then

  # Lock the user out 
  passwd -l $USER

  # Save some info
  date >> /root/secureRoot.log
  netstat -apent >> /root/secureRoot.log
  ps auxww >> /root/secureRoot.log
  w >> /root/secureRoot.log
  
  w | mail -s "$USER has gained ROOT access" root@localhost

wall << EOF

***********************************************************

          $USER has gained ROOT access

***********************************************************

EOF

  for i in `ls /dev/pts/`; do
    echo -e "\n$USER has gained ROOT access\n" >> /dev/pts/$i
  done

   
  logger -is -f /var/log/messages "$USER has gained ROOT access"

  
  echo -e "\a\n\n Die gimp\\n\n\a"

  skill -9 -u $USER
  
  ifconfig eth0 down
  
  logout 
  exit
fi

#alias su="su -"






