How do I prevent direct root login

[Velmurugan]

I want to disallow anybody logging in as root from other hosts/terminals. I want them to first become themselves and then su - to root, so that I can track who becomes root.
Thanks

[Steven Sim Kok Leong · Accepted solution]

Hi,

# echo console > /etc/securetty

This will allow only root access via the console. You can further restrict access to the "su" command by setting an ACL (access control list) on the executable via "chacl".

Regards.

Steven Sim.

[Rumen Ginev]

Add in /etc/profile this:

TTY=`tty`
if [ $LOGNAME = "root" -a $TTY != "/dev/console" ]
then
echo "Some message....."
exit 1
fi