vi /etc/pam.d/gdm
#auth required pam_succeed_if.so user != root quiet