From 334be586113e96dcc885a739f4036ebae156673c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc=20Sch=C3=B6chlin?= <ms-github@256bit.org>
Date: Wed, 27 Sep 2017 14:48:04 +0200
Subject: [PATCH] Update README.md

---
 README.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 56bfcee..249a3c0 100644
--- a/README.md
+++ b/README.md
@@ -162,7 +162,10 @@ the scriptreplay utility.
    ```bash
    chsh -s /usr/local/bin/auditshell <user>
    ```
-
+ * Prevent regular users to change their shell
+   * Remove all shells from /etc/shells
+   * Remove all perrmissions from the the /usr/bin/chsh binary
+   * Use the FAKE_SHELL variable in /etc/login.defs
 
 ## Watch auditshell sessions