It also means that the superuser account, necessary for repairing a broken system, should not depend on any programs outside of this small core.
A superuser has more rights than an ordinary user, being able to change the file ownership, set arbitrary permissions, and access all protected content.
With superuser privileges, launchctl can be used to make changes on a global scale.
Even if the attacker gained access to the jail's superuser account, he/she could only modify that jail, and not the whole system.
Superuser status is conferred on users who have been selected by foursquare staff for their helpful contributions to the community.
Only the directory owner and superuser are exempt from this.
Many exploits are designed to provide superuser-level access to a computer system.
Setting the clock is restricted to the superuser.
