How does a Solaris system determine who owns root when somebody uses su to root (to write it to a log file)? What about in user single mode, where does the system gets the information to save it to the logs?