#ktsuss is a wrapper for su, so it has to be setuid
ktsuss: setuid-binary usr/bin/ktsuss 4755 root/root
