How to stop root CDE logins

[robert fowler_1]

I have run bastille on 14 systems and not that you can still login as root via cde or dtlogin.
I cannot stop dtlogin as its needed. But I would like to stop root from logging in this way.

Anyone any ideas, I did not securetty has console listed however not sure if removing this will achieve desired result. note I cannot test this as live box...

thanks

[Pete Randall]

Start here:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=223747


Pete

[Rick Garland]

You can put console in the /etc/securetty file - this will prevent root from login in (except the console). On the console, do you have a graphics term or a green screen? If you have a green screen then you have stopped root from login via CDE. If you have a graphics screen, turn off CDE to the console

[robert fowler_1]

thanks everyone will try suggestions