If the user has access to a lever that enables accesss, that lever is not providing a sandbox.

I expected this to be about gaining os privileges.

They didn't create a sandbox. Poor security design all around

Sandbox. Sandbagging.

Tomato, tomawto

/s

[flagged]

"The sandbox isn't so bad, if the criticism you have is that it totally fails at doing the one thing a sandbox is supposed to do."