9.1.1.19. Identification and Authentication

By default, The root user may not log into the system from any console, remote or local.

References: IA-2 : IDENTIFICATION AND AUTHENTICATION (ORGANIZATIONAL USERS)