Allow only direct root logins on the system console. Create the /etc/securetty file with the single entry, console, as follows:
# echo console > /etc/securetty
This restriction applies to all login names that have a UID of zero (0).
The purpose of the /etc/securetty file is to specify where root can log in.