Hello,

Can someone give me some recommendations on how to protect this account? I understand that this account is an "operator" account and has root access.

Thanks in advance

UID 0 is root so limit to only console access, set strong password, change the password regularly. I would also set-up sudo so you don't need to use root account or su command. Enable logging and monitor each successful and unsuccessful login account.

What is the environment that this host or hosts will be running? Personal servers, academic, commercial, etc?

Thanks for responding - it will be used in a commercial setting

Your planning on hardening the whole system not just UID 0/root right?

for sure

Firstly have a look at the CERT UNIX security checklist, which will list a number of measures that would be expected of any system.

In addition to these you should read up on the "two man rule" and similar security techniques. In paticular you must be careful of SOX requirements if the system will be US based.