root restrictions

[vrbass at atlvmic1.vnet.ibm.com]

>>>I need a mechanism to restrict root logins to the console.

  chuser telnet=false rlogin=false

should do the trick if your other terminals are on the network.
If you have both network and serial terminals, you're going to
have to go to the secondary authentication methods mentioned
earlier.

From: Vance R. Bass                AIX Systems Specialist, IBM Knoxville
Internet: vrbass at atlvmic1.vnet.ibm.com            VNET: ATLVMIC1(VRBASS)
        Any resemblance between the above and the official IBM
                  position is purely coincidental.
+----------------------------------------------------------------------+
| You think you know when you learn, are more sure when you can write, |
| even more when you can teach, but certain when you can program.      |
+----------------------------------------------------------------------+