Hi,

> 1. can work only with known shells (for which it can work around known
>    bugs/security holes, and I hope it does this properly).

Well, it simply has a config file which describes which commands
(i.e. any program) can be executed by which user under which
circumstances/uid. It has several options for password checking, etc.

> 2. doesn't need the help of the kernel (may not be true for the particular
>    implementation, but can be made to work without kernel support for
>    setuid shell scripts).

`super' simply is a SUID-*program* :)

Bye,
Jochen

-- 
                      ------------------------------------
                      EMail:   jscharrl@ba-stuttgart.de
                         or:   acorn1@ftp.uni-stuttgart.de
                      ------------------------------------