Root password and single user boot

[btr!jbauman at decwrl.dec.com]

Is there a way to prevent someone from stepping up to
a workstation, giving the Sun 2 fingered salute (L1-A), booting single
user, modifying the password file (i.e. removing a root password),
then coming back on the net to pursue "other activities"? Surely there
must be a mechanism to ask for the root password even after booting single
user.....

Thanks for the help...

Jim Bauman
jbauman at btr.com
.