Tomasz (CC'ed to get attention..:-)), in my work on reviving old bug reports we have in shadow, which actually are about the upstream code, I went to http://bugs.debian.org/190215.
Here, in short, the bug submitter suggests that su logs successful root logins with LOG_NOTICE, just like login does. The suggestion seems interesting enough to me. WHat would you think of it ? --
