Root
A root or superuser is a privileged account or principal with broad administrative authority that can bypass ordinary permission restrictions within a system.
Google Anthos in Action
A root user is a Unix or Linux account with unrestricted administrative permissions over the operating system.
- How it is used
- Frames root as one of two container settings administrators must control to prevent unauthorized host access.
- How deep it goes
- Works through a permission matrix and host-setting tests, then points to cluster policy rather than detailing its implementation.
- Examples
- Contrasts root and nonroot containers attempting host kernel changes, with and without privileged mode.
- What you can do after
- Operate/configure it by assigning a nonroot runAsUser and restricting privileged containers through cluster policy.
Podman in Action: Secure, rootless containers for Kubernetes, microservices, and more
The root user is the Unix-like operating-system account with unrestricted administrative authority over the host.
- How it is used
- Frames root access as the security boundary distinguishing rootful container infrastructure from rootless workloads.
- How deep it goes
- Contrasts privileged account authority with user-owned processes and demonstrates escalation, but does not detail Linux privilege internals.
- Examples
- Uses docker.sock permissions, a privileged host mount, chroot, container removal, and separate user-space diagrams as concrete examples.
- What you can do after
- Evaluate container designs by identifying when daemon access or rootful execution can expose the host to full root privileges.
Amazon Web Services in Action, Third Edition: An in-depth guide to AWS
The AWS account root user is the identity created with an AWS account that has unrestricted access to that account.
- How it is used
- Protects the AWS account’s highest-privilege identity while routine access moves to appropriately restricted IAM users.
- How deep it goes
- Defines unrestricted access and gives password, MFA, and IAM-user guidance, but does not detail the MFA setup procedure.
- Examples
- Uses account signup, IAM user creation, aws configure, and an account-resource diagram as concrete examples.
- What you can do after
- Operate the AWS Management Console and CLI through IAM users while reserving and protecting the unrestricted root identity.
Read how Amazon Web Services in Action, Third Edition: An in-depth guide to AWS explains root →
Related concepts
- Linux capabilityhas part · A Linux capability is a discrete kernel permission that divides traditionally privileged operations into independently controllable units.
- multifactor authenticationconfigured by · Multifactor authentication is an authentication method that verifies identity using evidence from at least two distinct authentication-factor categories.
- row-level security policycontrasts with · A row-level security policy is a database authorization rule that determines which rows a principal may access or modify.
- database functionused by · A database function is a named routine stored or executed in a database that accepts inputs and computes a result, often a scalar or table-valued result.
- Docker daemonused by · The Docker daemon is a background service that manages Docker images, containers, networks, storage, and container operations on behalf of clients.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.