How to Display Superuser (root) Access Attempts to the Console

1. Become superuser or assume an equivalent role.

2. Edit the /etc/default/su file.

3. Uncomment the following line:

   CONSOLE=/dev/console

4. Use the su command to become root.

   Verify that a message is printed on the system console.

   This method immediately detects someone who is trying to gain superuser access to the system that you are on.