root restrictions

[Andrew T. Como]

I need a mechanism to restrict root logins to the console.

If I change the user characteristics "valid TTYs" to the console 
you can only "su" to "root" from the console. (this is not practical)

I have submitted a system change request to IBM and they refused.

Can anyone give me advice on a work around?

		Andrew Como  INTERNET: como at bnl.gov
			     BITNET:   como at bnlux0.BITNET
			     UUCP:     ...philabs!sbcs!bnl!como
				   or  bnlux0!como at uunet.uu.net