Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!wuarchive!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!msuinfo!sharkey!bnlux1.bnl.gov!news
From: como@max.bnl.gov (Andrew T. Como)
Newsgroups: comp.unix.aix
Subject: root restrictions
Message-ID: <1991Jun12.180648.27815@bnlux1.bnl.gov>
Date: 12 Jun 91 18:06:48 GMT
Sender: news@bnlux1.bnl.gov (sbcsvax news)
Organization: Brookhaven National Lab.  Upton NY  11973
Lines: 14


I need a mechanism to restrict root logins to the console.

If I change the user characteristics "valid TTYs" to the console 
you can only "su" to "root" from the console. (this is not practical)

I have submitted a system change request to IBM and they refused.

Can anyone give me advice on a work around?

		Andrew Como  INTERNET: como@bnl.gov
			     BITNET:   como@bnlux0.BITNET
			     UUCP:     ...philabs!sbcs!bnl!como
				   or  bnlux0!como@uunet.uu.net