Change Permissions on Password files so no one can change them
The following changes following file permissions, so that nobody can change the account privileges:
chattr +i /etc/passwdchattr +i /etc/shadowchattr +i /etc/groupchattr +i /etc/gshadow
See here for further details of the chattr command











