That would not be superroot.
The idea of superroot is “anything goes”. Or “old Whonix”. Or “similar sudo like most Linux desktop distribution such as Debian”.
Something that stays out of the way of expert, developer or lazy users. A freedom feature.
(As mentioned here there will likely be the following grub boot menu default entries:
PERSISTENT mode USER (For daily activities.)(this includes “full” apparmor-profile-everything)LIVE mode USER (For daily activities.)(this includes “full” apparmor-profile-everything)PERSISTENT mode ADMIN (For software installation.)(this includes “full” apparmor-profile-everything)PERSISTENT mode SUPERADMIN (Be very cautious!)
Add yet another mode? “superroot, but an attacker has to do some work to bypass the restrictions” - short name? Worth adding?
There are many different faccetes between security / freedom. I was hoping with three boot options (user-only, root but apparmor-profile-everything restricted, and superroot (fully unrestricted)) would give a sufficient balance. Something everyone could be happy with.
Btw I am making “some good progress” implementing the the grub boot menu entries. Will be “similar” to this very post: multiple boot modes for better security: persistent user | live user | persistent secureadmin | persistent superadmin | persistent recovery mode - #32 by Patrick
“similar”: Well, some things are non-ideal by technical limitations of grub-mkconfig such as recovery mode might be the second and not last boot menu entry. I am not sure yet. Still in process.
“some progress” = boot menu entries that allow setting kernel boot parameters. Not a full implementation of “boot/login into user” vs “boot/login into admin”.