diff --git a/README.md b/README.md
index 56bfcee..249a3c0 100644
--- a/README.md
+++ b/README.md
@@ -162,7 +162,10 @@ the scriptreplay utility.
    ```bash
    chsh -s /usr/local/bin/auditshell <user>
    ```
-
+ * Prevent regular users to change their shell
+   * Remove all shells from /etc/shells
+   * Remove all perrmissions from the the /usr/bin/chsh binary
+   * Use the FAKE_SHELL variable in /etc/login.defs
 
 ## Watch auditshell sessions