Blank password works for root

["Bill Beeman" <bbeeman beemangroup com>]

I just discovered that I can log into my FC1 box as root with either the
root password, or by simply leaving the password blank!

Functions this way from a command line, or in a terminal within either
KDE or Gnome.

Can anyone suggest where to look to stop this behavior.  This was a RH9
box upgraded to FC1, and has all current patches applied.

Thanks.

Bill