Superuser

For the Q&A site, seeSuper User.Not to be confused withPower user.

In computing, thesuperuseris a special user account used forsystem administration.Depending on the operating system (OS), the actual name of this account might beroot,administrator,adminorsupervisor.In some cases, the actual name of the account is not the determining factor; on Unix-like systems, for example, the user with auser identifier(UID) of zero is the superuser, regardless of the name of that account;and in systems which implement arole-based securitymodel, any user with the role of superuser (or its synonyms) can carry out all actions of the superuser account. Theprinciple of least privilegerecommends that most users and applications run under an ordinary account to perform their work, as a superuser account is capable of making unrestricted, potentially adverse, system-wide changes.

Unix and Unix-like

InUnix-likecomputer OSes (such asLinux),rootis the conventional name of the user who has all rights or permissions (to all files and programs) in all modes (single- or multi-user). Alternative names includebaroninBeOSandavataron some Unix variants.BSDoften provides atoor( "root" written backward) account in addition to a root account.Regardless of the name, the superuser always has auser IDof 0. The root user can do many things an ordinary user cannot, such as changing the ownership of files and binding to networkportsnumbered below 1024.

The namerootmay have originated becauserootis the only user account with permission to modify theroot directoryof a Unix system. This directory was originally considered to be root'shome directory,but the UNIXFilesystem Hierarchy Standardnow recommends that root's home be at/root.The first processbootstrappedin aUnix-likesystem, usually calledinit,runs with root privileges. It spawns all other processes directly or indirectly, which inherit their parents' privileges. Only a process running as root is allowed to change its user ID to that of another user; once it has done so, there is no way back. Doing so is sometimes calleddropping root privilegesand is often done as a security measure to limit the damage from possible contamination of the process. Another case isloginand other programs that ask users for credentials and in case of successfulauthenticationallow them to run programs with privileges of their accounts.

It is often recommended thatrootis never used as a normal user account,since simpletypographical errorsin entering commands can cause major damage to the system. Instead, a normal user account should be used, and then either thesu(substitute user) orsudo(substitute user do) command is used. Thesuapproach requires the user to know the root password, while thesudomethod requires that the user be set up with the power to run "as root" within the/etc/sudoersfile, typically indirectly by being made a member of thewheel,adm,admin,orsudogroup.

For a number of reasons, thesudoapproach is now generally preferred – for example it leaves anaudit trailof who has used the command and what administrative operations they performed.

Some OSes, such asmacOSand someLinuxdistributions (most notablyUbuntu), automatically give the initial user created the ability to run as root viasudo– but this is configured to ask them for their password before doing administrative actions. In some cases the actualrootaccount is disabled by default, so it can't be directly used.In mobile platform-oriented OSs such asApple iOSandAndroid,superuser access is inaccessible by design, but generally the security system can beexploitedin order to obtain it.In a few systems, such asPlan 9,there is no superuser at all.

Microsoft Windows

InWindows NTand later systems derived from it (such asWindows 2000,Windows XP,Windows Server 2003,andWindows Vista/7/8/10/11), there must be at least one administrator account (Windows XP and earlier) or one able to elevate privileges to superuser (Windows Vista/7/8/10/11 viaUser Account Control).In Windows XP and earlier systems, there is a built-in administrator account that remains hidden when a user administrator-equivalent account exists.This built-in administrator account is created with a blank password.This poses security risks as local users would be able to access the computer via the built-in administrator account if the password is left blank, so the account is disabled by default in Windows Vista and later systems due to the introduction of User Account Control (UAC).Remote users are unable to access the built-in administrator account.

A Windows administrator account is not an exact analogue of theUnixroot account – Administrator, the built-in administrator account, and a user administrator account have the same level of privileges. The default user account created in Windows systems is an administrator account. Unlike macOS, Linux, and Windows Vista/7/8/10 administrator accounts, administrator accounts in Windows systems without UAC do not insulate the system from most of the pitfalls of full root access. One of these pitfalls includes decreased resilience to malware infections. To avoid this and maintain optimal system security on pre-UAC Windows systems, it is recommended to simply authenticate when necessary from a standard user account, either via a password set to the built-in administrator account, or another administrator account.

In Windows Vista/7/8/10/11 administrator accounts, a prompt will appear to authenticate running a process with elevated privileges. Usually, no user credentials are required to authenticate the UAC prompt in administrator accounts but authenticating the UAC prompt requires entering the username and password of an administrator in standard user accounts. In Windows XP (and earlier systems) administrator accounts, authentication is not required to run a process with elevated privileges. This poses a security risk that led to the development of UAC. Users can set a process to run with elevated privileges from standard accounts by setting the process to "run as administrator" or using therunascommand and authenticating the prompt with credentials (username and password) of an administrator account. Much of the benefit of authenticating from a standard account is negated if the administrator account's credentials being used has a blank password (as in the built-in administrator account in Windows XP and earlier systems), hence why it is recommended to set a password for the built-in administrator account.

InWindows NT,2000 and higher, the root user is the Administrator account.

Novell NetWare

InNovell NetWare,the superuser was called "supervisor",later "admin".

OpenVMS

In OpenVMS, "SYSTEM" is the superuser account for the OS.

Older personal systems

On many older OSes on computers intended for personal and home use, anyone using the system had full privileges. Many such systems, such asDOS,did not have the concept of multiple accounts, and although others such asWindows 95did allow multiple accounts, this was only so that each could have its own preferences profile – all users still had full administrative control over the machine.

See also

• Hypervisor
• Jailbreaking (iOS)
• nobody (username)
• passwd
• Power user
• Privilege escalation
• Rooting (Android OS)
• Rootkit
• sudo
• Wheel (computing)

External links

• root Definition– by The Linux Information Project (LINFO)
• An Introduction to Mac OS X Security