lol, that looks about right. Now you just need to figure out what runs as root and trace the thread. Feel free to PM me.