Building a trusted computing base
Should "su" ask for the root password?
(take from my homepage a discussion of su)