root logins & syslog

[Andrew T. Como]

 IBM6000: aix 3.001

A while back someone had mentioned in order to restrict root logins 
 just change the valid ttys to the console device and sure enough
this will work.

#1 Question:  does this valid tty change also restrict "su - root" 
		to that device.

#2 Question:  I cannot get the syslog daemon to put the "su to root"
		entries anywhere.  Does this work on aix?

		Normally it's  "auth  or  auth.notice" entry
		in the conf file.  Has anyone been able to get this
		to work.
		Andrew Como  INTERNET: como at bnl.gov
			     BITNET:   como at bnlux0.BITNET
			     UUCP:     ...philabs!sbcs!bnl!como
				   or  bnlux0!como at uunet.uu.net