>> Администратор имеет ограниченные права
> Я так не играю...

Ничто не ново под Луной.

# sysctl security.bsd.suser_enabled:0
# sysctl -d security.bsd.suser_enabled
security.bsd.suser_enabled: processes with uid 0 have privilege
commit 754ad10054ccaf7af4888582e460d771052e0077
Author: rwatson <rwatson@FreeBSD.org>
Date:   Wed Dec 5 18:49:20 2001 +0000
    o Make kern.security.bsd.suser_enabled TUNABLE.

man securelevel

-1    Permanently insecure mode - always run the system in insecure mode.
           This is the default initial value.
     0     Insecure mode - immutable and append-only flags may be turned off.
           All devices may be read or written subject to their permissions.
     1     Secure mode - the system immutable and system append-only flags may
           not be turned off; disks for mounted file systems, /dev/mem and
           /dev/kmem may not be opened for writing; /dev/io (if your platform
...
     3     Network secure mode - same as highly secure mode, plus IP packet
           filter rules (see ipfw(8), ipfirewall(4) and pfctl(8)) cannot be
           changed and dummynet(4) or pf(4) configuration cannot be adjusted.
The security manual page was originally written by Matthew Dillon and
     first appeared in FreeBSD 3.1, December 1998