PAM securetty

This page goes over Article description::restricting root login consoles with [[PAM.]]

pam_securetty.so
The module allows the system administrator to restrict which console devices  is able to log in from.

Configuration
is used to specify which terminals is allowed to log in on. The format is one device name per line, without the prefix.

This configuration would allow logins on and  as well as the kernel console device, but no others.

is used to configure the rules PAM follows whenever system authentication needs to be done. This applies to physical logins as well as and anything else which utilizes PAM's authentication capabilities. To use the module, add: