root restrictions

[Sean Eric Fagan]

In article <8439 at awdprime.UUCP> shaggy at kleikamp.austin.ibm.com (David J. Kleikamp) writes:
>What good is it to restrict root logins to the console if you do allow other
>users to su to root from other TTY's?

Anyone can log in, and you won't know whom it was.  On the other hand, su
keeps a log (or can; I believe it does under AIX).  True, someone can edit
the log file, but that's less likely.

-- 
Sean Eric Fagan  | "I made the universe, but please don't blame me for it;
sef at kithrup.COM  |  I had a bellyache at the time."
-----------------+           -- The Turtle (Stephen King, _It_)
Any opinions expressed are my own, and generally unpopular with others.